Edit tour

Windows Analysis Report
https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK

Overview

General Information

Sample URL:	https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK
Analysis ID:	1527908
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4620 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2220,i,8475028246359423345,6197998057522107112,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850&sso_reload=true

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50070 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: blsrailno-my.sharepoint.com to https://login.microsoftonline.com:443/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5fid=00000003%2d0000%2d0ff1%2dce00%2d000000000000&response%5fmode=form%5fpost&response%5ftype=code%20id%5ftoken&resource=00000003%2d0000%2d0ff1%2dce00%2d000000000000&scope=openid&nonce=2ac581f4f66189b56624eeb90713a1f62c7b21e4ee706929%2dfc9b82e619ac85dff226e757b51935b811130e4d32a8883c665f4303de7480e3&redirect%5furi=https%3a%2f%2fblsrailno%2dmy%2esharepoint%2ecom%2f%5fforms%2fdefault%2easpx&state=od0w&claims=%7b%22id%5ftoken%22%3a%7b%22xms%5fcc%22%3a%7b%22values%22%3a%5b%22cp1%22%5d%7d%7d%7d&wsucxt=1&cobrandid=11bd8083%2d87e0%2d41b5%2dbb78%2d0bc43c8a8e8a&client%2drequest%2did=548857a1%2d30a5%2d9000%2dee84%2dd4f234c30850

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.45

Source: global traffic	HTTP traffic detected: GET /:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/1033/styles/corev15.css?rev=L%2FSON7jfOnEuOi%2FFA2qO%2Bw%3D%3DTAG431 HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG431 HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=Y95KWyn7ekYuwqxi5xwzpQ89_l89h1UBww-3bDCQj9NMZpziHZD9vXBTpP8g1aDemgZgbhhM0qshxRyh9vSI2xCMiHT6hhgkhUBTLFHAyzzITv1_EekQYaUkLSEtWv8MG4xrOoVqjgOAoesh0S0wth_SGHj9izKFfkE1qf5qOOpZqim4wiZYp_Q2PCtWNR0E0&t=7a0cc936 HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=qhBccBdfxmhNi2koPsPq5vCTIhttDwhkUDoMZ4RbYTwZjbqEXkdT_9ygDUt4eyaEEgC5l7UGu06MHFqhrxxIyxAKOSIlZ_UXaSmqSxQiJX2WJs13nKCvnzCBe07LFdqq158ZQGqRupsoc2da9r-RxcdS0Ha9_gSQPeqUjlW-OPNanv8KQuUzddZ3k63dpS_t0&t=7a0cc936 HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=-bVcVLsQPGhVD_FPS-Lpzf2QoNfYWRIQPIhg8fEJvuU63gpMUc-aN-bVZ2st-sDtVoGX2V0ieSMFB34YQGpme6qqzNPQxRnnJ_sYmvGtX2w1&t=638611486345608193 HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=qhBccBdfxmhNi2koPsPq5vCTIhttDwhkUDoMZ4RbYTwZjbqEXkdT_9ygDUt4eyaEEgC5l7UGu06MHFqhrxxIyxAKOSIlZ_UXaSmqSxQiJX2WJs13nKCvnzCBe07LFdqq158ZQGqRupsoc2da9r-RxcdS0Ha9_gSQPeqUjlW-OPNanv8KQuUzddZ3k63dpS_t0&t=7a0cc936 HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=Y95KWyn7ekYuwqxi5xwzpQ89_l89h1UBww-3bDCQj9NMZpziHZD9vXBTpP8g1aDemgZgbhhM0qshxRyh9vSI2xCMiHT6hhgkhUBTLFHAyzzITv1_EekQYaUkLSEtWv8MG4xrOoVqjgOAoesh0S0wth_SGHj9izKFfkE1qf5qOOpZqim4wiZYp_Q2PCtWNR0E0&t=7a0cc936 HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=-bVcVLsQPGhVD_FPS-Lpzf2QoNfYWRIQPIhg8fEJvuU63gpMUc-aN-bVZ2st-sDtVoGX2V0ieSMFB34YQGpme6qqzNPQxRnnJ_sYmvGtX2w1&t=638611486345608193 HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /personal/daniel_andersson_blsrail_no HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /personal/daniel_andersson_blsrail_no/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Fdaniel%5Fandersson%5Fblsrail%5Fno HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WSS_FullScreenMode=false
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2fdaniel_andersson_blsrail_no%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Fdaniel%255Fandersson%255Fblsrail%255Fno&Source=cookie HTTP/1.1Host: blsrailno-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WSS_FullScreenMode=false; RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGZGFuaWVsJTVGYW5kZXJzc29uJTVGYmxzcmFpbCU1Rm5v
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_54b287bb6b3cdb3a7698.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_54b287bb6b3cdb3a7698.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: blsrailno-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net

Source: chromecache_124.2.dr, chromecache_110.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_89.2.dr, chromecache_104.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_89.2.dr, chromecache_104.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_89.2.dr, chromecache_124.2.dr, chromecache_104.2.dr, chromecache_110.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_84.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_84.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_130.2.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.25318.12009/1033/initstrings.js
Source: chromecache_130.2.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.25318.12009/blank.js
Source: chromecache_130.2.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.25318.12009/init.js
Source: chromecache_130.2.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.25318.12009/theming.js
Source: chromecache_130.2.dr	String found in binary or memory: https://res.cdn.office.net/teams-js/2.21.0/js/MicrosoftTeams.min.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50070 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@18/84@20/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2220,i,8475028246359423345,6197998057522107112,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2220,i,8475028246359423345,6197998057522107112,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
http://knockoutjs.com/	0%	URL Reputation	safe
http://feross.org	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
189481-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com	52.105.40.53	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
blsrailno-my.sharepoint.com	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
m365cdn.nel.measure.office.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://blsrailno-my.sharepoint.com/_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG431	false	unknown
https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850&sso_reload=true	false	unknown
https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850	false	unknown
https://blsrailno-my.sharepoint.com/_layouts/15/1033/styles/corev15.css?rev=L%2FSON7jfOnEuOi%2FFA2qO%2Bw%3D%3DTAG431	false	unknown
https://blsrailno-my.sharepoint.com/WebResource.axd?d=-bVcVLsQPGhVD_FPS-Lpzf2QoNfYWRIQPIhg8fEJvuU63gpMUc-aN-bVZ2st-sDtVoGX2V0ieSMFB34YQGpme6qqzNPQxRnnJ_sYmvGtX2w1&t=638611486345608193	false	unknown
https://blsrailno-my.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fpersonal%2fdaniel_andersson_blsrail_no%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Fdaniel%255Fandersson%255Fblsrail%255Fno&Source=cookie	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	false	unknown
https://blsrailno-my.sharepoint.com/ScriptResource.axd?d=qhBccBdfxmhNi2koPsPq5vCTIhttDwhkUDoMZ4RbYTwZjbqEXkdT_9ygDUt4eyaEEgC5l7UGu06MHFqhrxxIyxAKOSIlZ_UXaSmqSxQiJX2WJs13nKCvnzCBe07LFdqq158ZQGqRupsoc2da9r-RxcdS0Ha9_gSQPeqUjlW-OPNanv8KQuUzddZ3k63dpS_t0&t=7a0cc936	false	unknown
https://blsrailno-my.sharepoint.com/ScriptResource.axd?d=Y95KWyn7ekYuwqxi5xwzpQ89_l89h1UBww-3bDCQj9NMZpziHZD9vXBTpP8g1aDemgZgbhhM0qshxRyh9vSI2xCMiHT6hhgkhUBTLFHAyzzITv1_EekQYaUkLSEtWv8MG4xrOoVqjgOAoesh0S0wth_SGHj9izKFfkE1qf5qOOpZqim4wiZYp_Q2PCtWNR0E0&t=7a0cc936	false	unknown
https://blsrailno-my.sharepoint.com/personal/daniel_andersson_blsrail_no/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Fdaniel%5Fandersson%5Fblsrail%5Fno	false	unknown
https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK	false	unknown
https://blsrailno-my.sharepoint.com/personal/daniel_andersson_blsrail_no	false	unknown
https://blsrailno-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://login.microsoftonline.com	chromecache_84.2.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_89.2.dr, chromecache_104.2.dr	false	URL Reputation: safe	unknown
http://knockoutjs.com/	chromecache_89.2.dr, chromecache_104.2.dr	false	URL Reputation: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_89.2.dr, chromecache_124.2.dr, chromecache_104.2.dr, chromecache_110.2.dr	false		unknown
https://login.windows-ppe.net	chromecache_84.2.dr	false		unknown
http://feross.org	chromecache_124.2.dr, chromecache_110.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.105.40.53	189481-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527908
Start date and time:	2024-10-07 11:37:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 37s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@18/84@20/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://blsrailno-my.sharepoint.com/personal/daniel_andersson_blsrail_no

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.186.110, 142.250.110.84, 34.104.35.123, 23.38.98.85, 23.38.98.109, 23.38.98.69, 23.38.98.90, 23.38.98.116, 23.38.98.96, 23.38.98.102, 23.38.98.101, 23.38.98.78, 23.38.98.91, 23.38.98.115, 23.38.98.81, 23.38.98.104, 23.38.98.112, 23.38.98.123, 23.38.98.93, 2.19.126.146, 2.19.126.143, 20.12.23.50, 192.229.221.95, 20.3.187.198, 199.232.210.172, 20.190.159.73, 20.190.159.0, 20.190.159.2, 40.126.31.69, 20.190.159.4, 20.190.159.75, 40.126.31.71, 20.190.159.71, 40.126.32.76, 20.190.160.14, 40.126.32.136, 40.126.32.134, 40.126.32.140, 20.190.160.22, 40.126.32.68, 20.190.160.20, 142.250.181.234, 142.250.186.74, 172.217.18.10, 142.250.185.138, 172.217.16.202, 142.250.184.234, 216.58.206.74, 142.250.186.138, 142.250.186.170, 172.217.16.138, 142.250.186.42, 142.250.184.202, 142.250.186.106, 142.250.185.234, 142.250.185.202, 142.250.185.170, 52.165.164.15, 142.250.186.35, 2.16.238.149, 2.16.238.152, 2.16.238.6, 2.16.238.20
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, 189481-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net, e40491.dscd.akamaiedge.net, clientservices.googleapis.com, res-1.cdn.office.net, a1894.dscb.akamai.net, ak.privatelink.msidentity.com, clients2.google.com, ocsp.digicert.com, login.live.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, login.mso.msidentity.com, wu-b-net.trafficmanager.net, res-1.cdn.office.net-c.edgekey.net.globalredir.akadns.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, aadcdnoriginwus2.azureedge.net, www.tm.ak.prd.aadg.akadns.net, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.de
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK

Input	Output
URL: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Next", "text_input_field_labels":["Email", "phone", "or Skype"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Sign in Email, phone, or Skype Can't access your account? Next", "has_visible_qrcode":false}

URL: https://login.microsoftonline.com/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Back", "text_input_field_labels":["Work or school account", "Personal account"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Which type of account do you need help with?", "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	downloaded
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	downloaded
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (456), with no line terminators
Category:	downloaded
Size (bytes):	456
Entropy (8bit):	5.236958145345599
Encrypted:	false
SSDEEP:	6:A+roDEH6IgMbIZc8Z11vmx6IKMPAI0qKIKMPAI0qeCMRTxIj+01KyBui9YDre:A+MYcYkc8Z1pmxKASAWCKx2+Wuit
MD5:	F8CF5B9592E56FC2293DB6FA4569A30A
SHA1:	BBEC461C8DCADAD297C41C61FDC9E14B51C0A641
SHA-256:	69D83239EA9B4354CDDE807814B2AE5FAD953F7896F4B90BBEE83FFFACECFFC0
SHA-512:	47405FACAF210A2D61BE0E6A9EC9DEE6140E404F9C16C68AA4EB6B17DF41666AAC37086B89695F575344D46BE47954080F27BDA0092C8348C9F5BEAC4A8C7E75
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.25318.12009/blank.js
Preview:	function $_global_blank(){if("undefined"==typeof g_all_modules)g_all_modules={};g_all_modules["blank.js"]={version:{rmj:16,rmm:0,rup:25318,rpr:12009}};typeof spWriteProfilerMark=="function"&&spWriteProfilerMark("perfMarkBegin_blank.js");typeof spWriteProfilerMark=="function"&&spWriteProfilerMark("perfMarkEnd_blank.js")}function ULSaew(){var a={};a.ULSTeamName="Microsoft SharePoint Foundation";a.ULSFileName="blank.commentedjs";return a}$_global_blank();

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	511765
Entropy (8bit):	5.440745681137311
Encrypted:	false
SSDEEP:	12288:Z3OkpWeupsTyhEQLQr4ABnIF7wEyAJU7/:Z3OkpWeuGTyhEQLQr4ABnIdwEyAm
MD5:	997860DEC834166491D5EF033B97B334
SHA1:	200A1DF7902373338BC845DBC94007DE761EDA4B
SHA-256:	259C4EF12469E912A8EAC887DA10AE4E18CB3E2987DA260AF987331E442C9B57
SHA-512:	ADC30D33DC40342611452A4F19E8511297774B3B723B5810ACEDA0586BB951B1275BED7E8ABFDD07F2E0CE6B94FBB8E760091A3F1C55F80F5670A9439751887E
Malicious:	false
Reputation:	low
Preview:	function $_global_core(){if("undefined"==typeof g_all_modules)g_all_modules={};g_all_modules["core.js"]={version:{rmj:16,rmm:0,rup:25318,rpr:12009}};typeof spWriteProfilerMark=="function"&&spWriteProfilerMark("perfMarkBegin_core.js");SPAnimation={};SPAnimation.g_Curves=new Array(7);SPAnimation.g_Curves[0]=new SPCurve(0,0,0,0,0,0);SPAnimation.g_Curves[1]=new SPCurve(1,1,0,0,0,0);SPAnimation.g_Curves[2]=new SPCurve(2,2,0,0,0,0);SPAnimation.g_Curves[3]=new SPCurve(3,3,.1,.9,.2,1);SPAnimation.g_Curves[4]=new SPCurve(4,3,.42,0,1,1);SPAnimation.g_Curves[5]=new SPCurve(5,3,0,0,.58,1);SPAnimation.g_Curves[6]=new SPCurve(6,3,.42,0,.58,1);SPKeyFrame.prototype={type:0,curveID:0,startTime:0,endTime:0,startValue:0,endValue:0,relativeTo:0,operationType:0};SPAnimation.Attribute={PositionX:1,PositionY:2,Height:3,Width:4,Opacity:5};SPAnimation.ID={Basic_Show:0,Basic_SlowShow:1,Basic_Fade:2,Basic_Move:3,Basic_Size:4,Content_SlideInFadeInRight:5,Content_SlideInFadeInRightInc:6,Content_SlideOutFadeOutRigh

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090)
Category:	dropped
Size (bytes):	141866
Entropy (8bit):	5.429983887489752
Encrypted:	false
SSDEEP:	1536:PyeDOMSQ6fTPRUbx3XCg/MJA5N4ii5WLeV5guLDY2Js0VgtWiTJmxyCXP3onrGGW:wMc1g/Mq5p1Mv+UyJbBw+Icwf
MD5:	2509D4C564AFC2C77D16BA6CA509B39F
SHA1:	201F1D80F8EEA9F5E8A7A7224CFF18674344F886
SHA-256:	D468D9F009E53FE1C47B9D6FDEFA3FF1A8C239973F11A6F892848E341EA17CCD
SHA-512:	C928C36D58BB0B2740E9BE3F3CA3F49624253F8DAD93BA7524E55F24CCCAF630E35FCA8C596CBCE50A0C1214C4986034FD3E26D98F759949C179C54009D5D93E
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 40329
Category:	downloaded
Size (bytes):	9984
Entropy (8bit):	7.979200972475404
Encrypted:	false
SSDEEP:	192:/Z/x+yzJpYhEFmtHByePw0JwScHXWumyaxkomNwWs8pQegUOX+B/rHiG:/JP8hEFshyePw8cHXx58k3OWVpQegUO0
MD5:	027A7D52E1CEED8AEF7DC13505B81D36
SHA1:	33CF0BCE6A4C8B44B4A80B3116C978C12EE93FD0
SHA-256:	29061464FB6FCE2326B952EACAA95C3C6183BFEA74C3851390E9838720D372A6
SHA-512:	FCDDEBF6DE759B5079E7DF2432771A866DE1824B119AD8CB3BAE11F9FAA060B943D52F121E4C63E7E20D43F31B2220C1D4E9C24A20004C4B061CD1A0A5EE5AC9
Malicious:	false
Reputation:	low
URL:	https://blsrailno-my.sharepoint.com/ScriptResource.axd?d=qhBccBdfxmhNi2koPsPq5vCTIhttDwhkUDoMZ4RbYTwZjbqEXkdT_9ygDUt4eyaEEgC5l7UGu06MHFqhrxxIyxAKOSIlZ_UXaSmqSxQiJX2WJs13nKCvnzCBe07LFdqq158ZQGqRupsoc2da9r-RxcdS0Ha9_gSQPeqUjlW-OPNanv8KQuUzddZ3k63dpS_t0&t=7a0cc936
Preview:	...........}ks.H......@a{ebU......h.^.._a..3!k...HB....m.%....?i..e..U@.........wefefefU........O.....?8).we:...?x..eQ.....EQ.:-.`p.e.^....b.W..X.........UQ.......,...4.jV~..tQ........`......Y..,.]........sR..E...M....\.c>H5.t......xW.jt.?6?.c(..`_....B.G..'.<.1.c....o...yZ..cZ.a=K+....l.l...EQ..4.=......L_..Z..4gYuQ\|._!]m1.`Q.uQ....)..=..\|.....2.8G."XY.......]c..\|xT....3@..?..Zm..E.'........2..E gy..<(.Z...8XY..4O2....U...4.0..5.W!}x._i.`.T,.V.G...b/.t..j>...<.((....,."Uo5X}.@QE.b.khU.h...>...Q~=.k.?.....o.0k........GM..X......P^G....=..<fY.U..S....K....H..9:......'...J=).O....#G[m...30k...j.2+.im.(Km3.uxv._.pT.4.>..f.-..UZ.=e...C....._5..xR.:..\U..jR. .....9A..1:1.......a..2...U......YTP..`...l0.9.t.}.'.p.c3q.. {m.,...G1..".L.Aj@.D.h.p......fZ{...eYB......1.Ep.b&..% .c.._i9.).,.eD.'...`.E.i..M3#+6...9+....B..NYB..%..8..?....zv.r..XP..W.../+..e.N........Z..i..... ....4I..iR...8+.>....k...N?....MA.....uU...&...Xyb..u..H....%.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	622
Entropy (8bit):	5.030708856292114
Encrypted:	false
SSDEEP:	12:UXRtEohlWNmONv0MBR0/vUvFa9vN8ESve77Lxukm3auDjqHV:Ofa9n2H8qzxukmKuDjkV
MD5:	B45EDFC9FCDB690CCDA004A8483955E0
SHA1:	BAEDF73329EABB32504CAC640538EE3B6B31819F
SHA-256:	E817BF53005172205995AA07E0021BD8254A0204A1177E925F365E838C32D069
SHA-512:	E2709C77BA686FC58FE528EC2C2CEB6B9C84D045018D77FB9B376359F204FB6B889910B6748C978B4FF9712A7611342DF3C8C59711AA42090219DEC0C83778D2
Malicious:	false
Reputation:	low
URL:	https://blsrailno-my.sharepoint.com/_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG431
Preview:	/* _lcid="1033".._LocalBinding */..#ms-error-header..{..margin:118px 0px 16px;..min-height:50px;..}..#ms-error-gobackcont..{..margin-top:28px;..}..#ms-accessDenied-reqDialog..{..max-width:100%;..}..#ms-error-body..{..background-size:auto;..overflow:auto;..width:830px;..margin-right:auto;..margin-left:auto;..}...ms-error-returnLink..{..line-height:19px;..vertical-align:middle;..}...ms-error-detailsFold..{..padding-top:42px;..}...ms-error-techMsg..{..padding-top:28px;..}...ms-error-groupJoinPanel..{..margin-top:15px;..}...ms-error-groupProfileText..{..margin-top:17px;..}...ms-error-separator..{..margin:34px 0px;..}..

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	341640
Entropy (8bit):	5.323828705450118
Encrypted:	false
SSDEEP:	1536:k6Bi397Ra/9FjWr5JwiaPyJmbu52JmKI1DS9sw83nm5ZMUuj24S+o0WmuGUmh4j4:Lvf42B9Hem3s
MD5:	2FF48E37B8DF3A712E3A2FC5036A8EFB
SHA1:	C1BEF7B697A13DAD03956461489441F3126F489E
SHA-256:	FD288B37B846CB8199D6C63D3999915C5AD54D965AC1EFD31289E1FB140FC031
SHA-512:	5A52BA020A04B763E3FD0034D53AE02428D9B2F2AE525FA86412F7EB12383152B2A4CAA4115C3664ED81F9BEBFDB49E2A15A8A5316A221984C1A1F042E6CCA1A
Malicious:	false
Reputation:	low
URL:	https://blsrailno-my.sharepoint.com/_layouts/15/1033/styles/corev15.css?rev=L%2FSON7jfOnEuOi%2FFA2qO%2Bw%3D%3DTAG431
Preview:	/* _lcid="1033".._LocalBinding /..body,...ms-core-defaultFont,..#pageStatusBar,..#hybridTooltipStatusBar,...ms-status-msg,...js-callout-body..{../ [ReplaceFont(themeFont:"body")] / font-family:"Segoe UI","Segoe",Tahoma,Helvetica,Arial,sans-serif;..font-size:13px;..}..body,...ms-core-defaultFont,...js-callout-body..{../ [ReplaceColor(themeColor:"BodyText")] / color:#444;..}...ms-core-defaultFont..{..font-weight:normal;..text-decoration:none;..white-space:normal;..word-break:normal;..line-height:normal;..}..body..{..margin:0px;..overflow:hidden;../ [ReplaceColor(themeColor:"PageBackground")] / background-color:#fff;..background-size:cover;..background-repeat:no-repeat;..}..html > .ms-core-needIEFilter..{../ [ReplaceBGImage] / -ms-filter:"progid:DXImageTransform.Microsoft.AlphaImageLoader(src='about:blank',sizingMethod='scale');";..}...ms-backgroundImage..{../ [ReplaceBGImage] */ background-image:url();..}..#s4-ribbonrow..{..position:relative;..}..#s4-workspace..{..overflow:auto

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	dropped
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
Reputation:	low
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	3.9482833105763633
Encrypted:	false
SSDEEP:	48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E
MD5:	0B60F3C9E4DA6E807E808DA7360F24F2
SHA1:	9AFC7ABB910DE855EFB426206E547574A1E074B7
SHA-256:	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
SHA-512:	1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ...........................................................................70..7...7...7...7...7...7...70..............................................................................................7`..7...7...7...7...7...7...7...7...7`......................................................................................7P..7...7...7...7...7...7...7...7...7...7...7P..............................................................................7...7...7...7...7...7...7...7...7...7...7...7...7...7...........................................................................7`..7...7...7...7...7...7...7...7...7...7...7...7...7`..........................................................................,...,...,...,...,...,...,.......7...7...7...7...7...7...........................................................................'...'...'...'...'...'...'...'...2...7...7...7...7...,....................`..........................

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
Category:	downloaded
Size (bytes):	254
Entropy (8bit):	7.066074991728423
Encrypted:	false
SSDEEP:	6:XtS8G99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:XAH99kRX1YQBDFCnDXdWYtrE
MD5:	847A4212B99B9076EE39328B24CD30AF
SHA1:	73F15078CF1D396485F644A79B6E25EF0637685D
SHA-256:	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
SHA-512:	9AF77E9ED8BD9A39A47F36AAC2D01B5AF5D56C04CD933427DF95CC80904D7EE7AC3F7F9443D8AEF236CC84FB4DC4CC335AF0BF8F9BC0C13D720187096D149220
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23437), with CRLF line terminators
Category:	dropped
Size (bytes):	23594
Entropy (8bit):	5.107347306409284
Encrypted:	false
SSDEEP:	384:zyWvVsT5pTtxJOyNm7lMqasjI8LWv3n8wyM:zJsT5pTt7kK+M
MD5:	964FCB2BAF87049DC68975291AE89431
SHA1:	D0CD8C989D44BC531472B632868D3FB2DE4B3184
SHA-256:	B8F7BD568E379502CF0C00027581D2761C7DC14B166F5D25FC048A0B56B7BFBB
SHA-512:	03CB58D197A776F9C315C2A14B9C034D88C7B7E9F4247C5698396F4FE7363A22FC2042A24C02A245C7E035DD2862F88E8EF46A7E5A269EDC2B69E39752A52987
Malicious:	false
Reputation:	low
Preview:	var Strings; if (Strings === undefined) { Strings=new Object(); }Strings.STS=function(){};Strings.STS.L_NewTab="New tab";Strings.STS.L_CalloutLastEditedNameAndDate="Changed by ^1 on ^2";Strings.STS.L_CalloutSourceUrlHeader="Location";Strings.STS.L_SPDiscBestUndo="Remove best reply";Strings.STS.L_SPClientManage="manage";Strings.STS.L_SPAddNewWiki="new Wiki page";Strings.STS.L_SPCategorySortRecent="Recent";Strings.STS.L_ViewSelectorTitle="Change View";Strings.STS.L_SPDiscNumberOfLikes="{0} likes\|\|{0} like\|\|{0} likes";Strings.STS.L_Timeline_DfltViewName="Timeline";Strings.STS.L_TimelineToday="Today";Strings.STS.L_SPDiscNoPreviewAvailable="No preview available for this reply";Strings.STS.L_NODOCView="There are no documents in this view.";Strings.STS.L_SPBlogPostAuthorCategories="by {0} in {1}";Strings.STS.L_SPBlogsNoItemsInCategory="There are no posts in this category.";Strings.STS.L_QRCodeDescription="Scan this QR code with your phone or tablet to open {0}";Strings.STS.L_RelativeDateTime

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 40329
Category:	dropped
Size (bytes):	9984
Entropy (8bit):	7.979200972475404
Encrypted:	false
SSDEEP:	192:/Z/x+yzJpYhEFmtHByePw0JwScHXWumyaxkomNwWs8pQegUOX+B/rHiG:/JP8hEFshyePw8cHXx58k3OWVpQegUO0
MD5:	027A7D52E1CEED8AEF7DC13505B81D36
SHA1:	33CF0BCE6A4C8B44B4A80B3116C978C12EE93FD0
SHA-256:	29061464FB6FCE2326B952EACAA95C3C6183BFEA74C3851390E9838720D372A6
SHA-512:	FCDDEBF6DE759B5079E7DF2432771A866DE1824B119AD8CB3BAE11F9FAA060B943D52F121E4C63E7E20D43F31B2220C1D4E9C24A20004C4B061CD1A0A5EE5AC9
Malicious:	false
Reputation:	low
Preview:	...........}ks.H......@a{ebU......h.^.._a..3!k...HB....m.%....?i..e..U@.........wefefefU........O.....?8).we:...?x..eQ.....EQ.:-.`p.e.^....b.W..X.........UQ.......,...4.jV~..tQ........`......Y..,.]........sR..E...M....\.c>H5.t......xW.jt.?6?.c(..`_....B.G..'.<.1.c....o...yZ..cZ.a=K+....l.l...EQ..4.=......L_..Z..4gYuQ\|._!]m1.`Q.uQ....)..=..\|.....2.8G."XY.......]c..\|xT....3@..?..Zm..E.'........2..E gy..<(.Z...8XY..4O2....U...4.0..5.W!}x._i.`.T,.V.G...b/.t..j>...<.((....,."Uo5X}.@QE.b.khU.h...>...Q~=.k.?.....o.0k........GM..X......P^G....=..<fY.U..S....K....H..9:......'...J=).O....#G[m...30k...j.2+.im.(Km3.uxv._.pT.4.>..f.-..UZ.=e...C....._5..xR.:..\U..jR. .....9A..1:1.......a..2...U......YTP..`...l0.9.t.}.'.p.c3q.. {m.,...G1..".L.Aj@.D.h.p......fZ{...eYB......1.Ep.b&..% .c.._i9.).,.eD.'...`.E.i..M3#+6...9+....B..NYB..%..8..?....zv.r..XP..W.../+..e.N........Z..i..... ....4I..iR...8+.>....k...N?....MA.....uU...&...Xyb..u..H....%.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
Category:	downloaded
Size (bytes):	122193
Entropy (8bit):	7.997505273485286
Encrypted:	true
SSDEEP:	3072:H4ojbjOwCNA0H+Zenw+OA6m3SmjcnlDHG21TIoN:dHyi0Ity3wnY2lIA
MD5:	AF2A7A4929E13F15A045C8C8D80A4543
SHA1:	6A1EC81A5085D0846C77DD616AE686FF732C32D6
SHA-256:	EB47C5509CEF44C582EF8ABB8C58766EA6118AD40B0FFC22A7652ED1DC6FEE8B
SHA-512:	D3B1FC08CB7DDE27E9A16B749B0024A9F11D5067B0D023F8EB2E468533297DFC5BD7739C9B696F8D11D269350FA5F2D329FE6ABC4AB679888FDC97B2450DB336
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.QX..................Oix..).NK7...KW...........`....G/..=......[..R......Y....KS.7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...a.^.]..a.X&......2.o...$,..s..l<^0)..1...Yu..w.$..0c.=c.}...xT"d....{..@.&.. .es0q.$bl.D..1:z+y..t.F..X.....qn.../fUI...q....r.f.wk..Q.Y.I2.....<.GU'...\|..1t.y...{....w..y.s.+.t5.A.J.............$...}...k.......tu........;Vf...]...\|.Q......Z.].^...q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+..*T.....p....S...qR..+K1@k..mkQo...A........]p_.X2........B.....I..3..7..]d....@.bX....z.g...\|..V-K[..^(..y...^N.^..oJF.kQ.P.R..F..om.B.pL.<F....R...(..i..,......I.F< ..T...`1.W3....L....+.S.M.c....110..........H....E,O..v..l..=...H$.J..J....4.C..dzPI..S.B@RJ.V>..GJ."/.eEwC..Q}d.k......KN\|.i...=.....!.V....<%J.D......b

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	511765
Entropy (8bit):	5.440745681137311
Encrypted:	false
SSDEEP:	12288:Z3OkpWeupsTyhEQLQr4ABnIF7wEyAJU7/:Z3OkpWeuGTyhEQLQr4ABnIdwEyAm
MD5:	997860DEC834166491D5EF033B97B334
SHA1:	200A1DF7902373338BC845DBC94007DE761EDA4B
SHA-256:	259C4EF12469E912A8EAC887DA10AE4E18CB3E2987DA260AF987331E442C9B57
SHA-512:	ADC30D33DC40342611452A4F19E8511297774B3B723B5810ACEDA0586BB951B1275BED7E8ABFDD07F2E0CE6B94FBB8E760091A3F1C55F80F5670A9439751887E
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.25318.12009/core.js
Preview:	function $_global_core(){if("undefined"==typeof g_all_modules)g_all_modules={};g_all_modules["core.js"]={version:{rmj:16,rmm:0,rup:25318,rpr:12009}};typeof spWriteProfilerMark=="function"&&spWriteProfilerMark("perfMarkBegin_core.js");SPAnimation={};SPAnimation.g_Curves=new Array(7);SPAnimation.g_Curves[0]=new SPCurve(0,0,0,0,0,0);SPAnimation.g_Curves[1]=new SPCurve(1,1,0,0,0,0);SPAnimation.g_Curves[2]=new SPCurve(2,2,0,0,0,0);SPAnimation.g_Curves[3]=new SPCurve(3,3,.1,.9,.2,1);SPAnimation.g_Curves[4]=new SPCurve(4,3,.42,0,1,1);SPAnimation.g_Curves[5]=new SPCurve(5,3,0,0,.58,1);SPAnimation.g_Curves[6]=new SPCurve(6,3,.42,0,.58,1);SPKeyFrame.prototype={type:0,curveID:0,startTime:0,endTime:0,startValue:0,endValue:0,relativeTo:0,operationType:0};SPAnimation.Attribute={PositionX:1,PositionY:2,Height:3,Width:4,Opacity:5};SPAnimation.ID={Basic_Show:0,Basic_SlowShow:1,Basic_Fade:2,Basic_Move:3,Basic_Size:4,Content_SlideInFadeInRight:5,Content_SlideInFadeInRightInc:6,Content_SlideOutFadeOutRigh

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	340993
Entropy (8bit):	5.4428625920901155
Encrypted:	false
SSDEEP:	6144:eXVJjsUJaW86hPIjcfb+47IunpizIcxdS+MI4Ny6qF+HNJdWLWnAboc3lexR1Yh5:eXVJjsUPV0ugzIE
MD5:	7BB981BB94AA022D83BFC526F168181F
SHA1:	C794826011A60FD49FA8F2F62D91EA3444152578
SHA-256:	AD575714D35B3F57E74F682191D2079C2D7B71489AF4DF3DD6BB6C9D313A9AC7
SHA-512:	2BB9E20CA426BE2A09144732017018B00BBD4B10C0ABDEECDAFADC6763FEF67E0F80DD73429779D949DFAC52AA80DF8BD9198B1CDAFD2AC5B1379E2D00AB1C04
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.25318.12009/init.js
Preview:	function $_global_init(){if("undefined"==typeof g_all_modules)g_all_modules={};g_all_modules["init.js"]={version:{rmj:16,rmm:0,rup:25318,rpr:12009}};if(-1!=navigator.userAgent.indexOf("ProfilerMark")&&"function"==typeof msWriteProfilerMark)spWriteProfilerMark=function(a){window.msWriteProfilerMark(a)};typeof spWriteProfilerMark=="function"&&spWriteProfilerMark("perfMarkBegin_init.js");if(typeof OffSwitch=="undefined"){OffSwitch={__namespace:true};OffSwitch_module_def()}if(typeof RuntimeErrors=="undefined"){RuntimeErrors={__namespace:true};RuntimeErrors_module_def()}if(typeof Verify=="undefined"){Verify={__namespace:true};Verify_module_def()}if(typeof Define=="undefined"){Define={__namespace:true};Define_module_def()}if(typeof BrowserDetection=="undefined"){BrowserDetection={__namespace:true};BrowserDetection_module_def()}(function(){b.prototype={firefox:undefined,firefox36up:undefined,firefox3up:undefined,firefox4up:undefined,ie:undefined,ie55up:undefined,ie5up:undefined,ie7down:undefi

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	3.9482833105763633
Encrypted:	false
SSDEEP:	48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E
MD5:	0B60F3C9E4DA6E807E808DA7360F24F2
SHA1:	9AFC7ABB910DE855EFB426206E547574A1E074B7
SHA-256:	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
SHA-512:	1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80
Malicious:	false
Reputation:	low
URL:	https://blsrailno-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ...........................................................................70..7...7...7...7...7...7...70..............................................................................................7`..7...7...7...7...7...7...7...7...7`......................................................................................7P..7...7...7...7...7...7...7...7...7...7...7P..............................................................................7...7...7...7...7...7...7...7...7...7...7...7...7...7...........................................................................7`..7...7...7...7...7...7...7...7...7...7...7...7...7`..........................................................................,...,...,...,...,...,...,.......7...7...7...7...7...7...........................................................................'...'...'...'...'...'...'...'...2...7...7...7...7...,....................`..........................

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (456), with no line terminators
Category:	dropped
Size (bytes):	456
Entropy (8bit):	5.236958145345599
Encrypted:	false
SSDEEP:	6:A+roDEH6IgMbIZc8Z11vmx6IKMPAI0qKIKMPAI0qeCMRTxIj+01KyBui9YDre:A+MYcYkc8Z1pmxKASAWCKx2+Wuit
MD5:	F8CF5B9592E56FC2293DB6FA4569A30A
SHA1:	BBEC461C8DCADAD297C41C61FDC9E14B51C0A641
SHA-256:	69D83239EA9B4354CDDE807814B2AE5FAD953F7896F4B90BBEE83FFFACECFFC0
SHA-512:	47405FACAF210A2D61BE0E6A9EC9DEE6140E404F9C16C68AA4EB6B17DF41666AAC37086B89695F575344D46BE47954080F27BDA0092C8348C9F5BEAC4A8C7E75
Malicious:	false
Reputation:	low
Preview:	function $_global_blank(){if("undefined"==typeof g_all_modules)g_all_modules={};g_all_modules["blank.js"]={version:{rmj:16,rmm:0,rup:25318,rpr:12009}};typeof spWriteProfilerMark=="function"&&spWriteProfilerMark("perfMarkBegin_blank.js");typeof spWriteProfilerMark=="function"&&spWriteProfilerMark("perfMarkEnd_blank.js")}function ULSaew(){var a={};a.ULSTeamName="Microsoft SharePoint Foundation";a.ULSFileName="blank.commentedjs";return a}$_global_blank();

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	340993
Entropy (8bit):	5.4428625920901155
Encrypted:	false
SSDEEP:	6144:eXVJjsUJaW86hPIjcfb+47IunpizIcxdS+MI4Ny6qF+HNJdWLWnAboc3lexR1Yh5:eXVJjsUPV0ugzIE
MD5:	7BB981BB94AA022D83BFC526F168181F
SHA1:	C794826011A60FD49FA8F2F62D91EA3444152578
SHA-256:	AD575714D35B3F57E74F682191D2079C2D7B71489AF4DF3DD6BB6C9D313A9AC7
SHA-512:	2BB9E20CA426BE2A09144732017018B00BBD4B10C0ABDEECDAFADC6763FEF67E0F80DD73429779D949DFAC52AA80DF8BD9198B1CDAFD2AC5B1379E2D00AB1C04
Malicious:	false
Reputation:	low
Preview:	function $_global_init(){if("undefined"==typeof g_all_modules)g_all_modules={};g_all_modules["init.js"]={version:{rmj:16,rmm:0,rup:25318,rpr:12009}};if(-1!=navigator.userAgent.indexOf("ProfilerMark")&&"function"==typeof msWriteProfilerMark)spWriteProfilerMark=function(a){window.msWriteProfilerMark(a)};typeof spWriteProfilerMark=="function"&&spWriteProfilerMark("perfMarkBegin_init.js");if(typeof OffSwitch=="undefined"){OffSwitch={__namespace:true};OffSwitch_module_def()}if(typeof RuntimeErrors=="undefined"){RuntimeErrors={__namespace:true};RuntimeErrors_module_def()}if(typeof Verify=="undefined"){Verify={__namespace:true};Verify_module_def()}if(typeof Define=="undefined"){Define={__namespace:true};Define_module_def()}if(typeof BrowserDetection=="undefined"){BrowserDetection={__namespace:true};BrowserDetection_module_def()}(function(){b.prototype={firefox:undefined,firefox36up:undefined,firefox3up:undefined,firefox4up:undefined,ie:undefined,ie55up:undefined,ie5up:undefined,ie7down:undefi

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35238), with no line terminators
Category:	downloaded
Size (bytes):	35238
Entropy (8bit):	5.390650418562352
Encrypted:	false
SSDEEP:	768:PrxzCC2akwbs7lSZTprPaTrPyrfKwKTZiNOzpCk47S:hsp7ly9rP0S4pCkx
MD5:	C637DE6889D81964119BA1FD124E2454
SHA1:	5DB2B1681BE6FF9A7B26E269CD80D817D41A01BE
SHA-256:	18E8366C8C5590C3D056BA6CA9691B7471D6970EE00D0E22A4B68E517B54F087
SHA-512:	78288767F08DB38F6DC8C366546CECC05DF35C25BCD898B94DCCC5ECCB3ACD7807817BAF813BCA11F4CCAC169A980E4F10EBF4334000C4D2D0F74DCC30BB36EE
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.25318.12009/theming.js
Preview:	var Theming={__namespace:true};Theming_module_def();function Theming_module_def(){Theming.ApplyThemeToCss=tb;Theming.ReplaceCssTextForElement=J;Theming.ThemeInfo=E;Theming.ImageProcessor=R;Theming.Colors={Color:a,ColorApplication:x,HslColor:h};function cb(d,c,e){for(var b=true,a=0;a<c.length;a++)if(d.charCodeAt(e+a)!==c.charCodeAt(a)){b=false;break}return b}var c={text:0,comment:1,string:2,url:3,right_par:4,font_family:5,rgb:6,rgba:7,colon:8,semicolon:9,right_curly:10,color:11};function d(a,b){this.kind=a;this.text=b}function Db(b){var e,a,g,f,l="*/",u="url(",i=")",j="font-family",t="rgb(",s="rgba(",o="#",w=":",y=";",x="}",k=new d(c.text,"");if(!Boolean(b))b="";a=0;f=b.length;m.prototype={kind:0,text:"",getToken:function(){return null}};function m(){}var r={"/":{},"'":{},'"':{},"#":{},")":new d(c.right_par,")"),";":new d(c.semicolon,";"),":":new d(c.colon,":"),"}":new d(c.right_curly,"}"),u:{getToken:q},f:{getToken:n},r:{getToken:p}};function h(c){var a=b.indexOf(")",c);if(a<0)a=f;retu

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (64251), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	257467
Entropy (8bit):	4.952388254953034
Encrypted:	false
SSDEEP:	6144:av7NaXKE4yKsoA77nKmNYaiPAcjRnLKexzN+eOnQAYJRdspLEq5GDF+DFF5e:i7NAkJRA77nKmNYaijB1fie
MD5:	18D4081FF87666E4F793D09F60AF8F73
SHA1:	30274CD5E8E6E711745E36EBD606A1BE6F626D20
SHA-256:	0662DB0C9A4E119A6C5E65365590A31A8DA0EA458E05C029EB5F620327A60CD1
SHA-512:	0529491C6138792AE15B542FECFF742AC52D86CB9868AD69DC8B3971BF34B1366B7C125615614D41593D259D24F271B76B5A3A38762F67C0A259155988B1699F
Malicious:	false
Reputation:	low
URL:	https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN".."http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta http-equiv="X-UA-Compatible" content="IE=8"/><meta name="ROBOTS" content="NOHTMLINDEX" /><title>......Error....</title><link id="CssLink-10ec9bca18c24ad7be6d95608a3749f0" rel="stylesheet" type="text/css" href="/_layouts/15/1033/styles/corev15.css?rev=L%2FSON7jfOnEuOi%2FFA2qO%2Bw%3D%3DTAG431"/>.<link id="CssLink-a0f30eb4456d4195a3ebdc4c449357b7" rel="stylesheet" type="text/css" href="/_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG431"/>.<style id="SPThemeHideForms" type="text/css">body {opacity:0 !important}</style><script type="text/javascript">// <![CDATA[ ...var _initGlobalSnapShot = {};try {

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 4730
Category:	downloaded
Size (bytes):	1665
Entropy (8bit):	7.8887433425840845
Encrypted:	false
SSDEEP:	48:XCgINmlfnsz0OwnqV9T4+Z1t6kfcLOR7LgV:XhlvJOyqV9UCfyO12
MD5:	EB69D86E918C5776FDC33F839B0C114A
SHA1:	0E094ECFE371B5F9267778302EE6443C76B5BEC6
SHA-256:	112E2C223763BC148BB26D43C3B95E9CA5F9B6860BE5A4FD14617E204E0A5D28
SHA-512:	8277D72F775F90587B6C88992309B84242ED554EB82964D1D59D7826F985AA9F3CE323B6E362300997A4A63AA8DD6577CB36430417825AA04F69E2FC0B5D26BC
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_54b287bb6b3cdb3a7698.js
Preview:	...........W[o.6.~.`...$..K.z@..K..1b.....%.6...H.....l.q.......&..;....{.^#......w.G..P.....u.....e.....v.S..P.F4$....$@.!..e>.1.X.."....h$x...X.[.+.B.(y$.3T.s"@],...w...'`..).m..s.>Q.qE}.0....~0IP..".lB...........'t.Nd..y.6. I..q.&K...i..4n......S......>!@.5.8....g.....2...1 ..').u<....-..^_...A.+7..$b.!.!. ..I......A@.s4...g.px,...S6$..Uo.h.......T<.I.kk..$n....J..D.j..p.u.\)..&J.]...$.....d.b...;..(}.]~vn.R..2Wm.M<@.Nx.).\|u7....~7..%d?...n.~.~>.Qvhz.^.f...M3.......;;....o.n..I........Z{.0_.UP6.i.a..b.Z..m..J...8,.......m..n.k.@.{.>.d.PPPKK...o.rM.......D..._A3...r.....zn..q9...'_(.u......E[.\....T~].).M.C...Y.X\|X..(.w{]...d.(...c...<..p..L)OdQ.E..al=.../0#.q."i..`..c.N.......+.P.G.T9q.CG...l;S.h...q.....[...D...........D.....l...........2..O.;-~....(.3..D.T......b#.....j......{.g.g...(..Q..Tv..]o.4.Z....s.FL.h..D.bH/.C..<aj....u..=.F...R;lz.j.utT....F...ll..V..}.V.V....Q=h...k.R..v....^..r.}AA.......=.%.A..Z+..0;`..........3.a.[.q...

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	186722
Entropy (8bit):	5.127936869447186
Encrypted:	false
SSDEEP:	1536:qofu83Pw6jz1+8YZwf7BN6pJsnNxezT8+zacaS8Ob4C//aT5L4DK:883z5+nMDEuvezT8++6kZCe
MD5:	2DE2482829622DE740DB42E04CBCD047
SHA1:	2A88D65A01BDA232B97B24163F66BA7F90A63386
SHA-256:	947D9E7117E8528021EC98FBBD6FE75A4D393A699DFFFFB3A2803EAE42845CEB
SHA-512:	35A2B88CF1FD1505BAD30CF68FB235ED5E5029D4824EC8586452A53E820563229AEA06156B46702C5046DC4BCE0046DFC74E934E215BFDD040B2715D298E8886
Malicious:	false
Reputation:	low
Preview:	var Strings; if (Strings === undefined) { Strings=new Object(); }Strings.CMS=function(){};Strings.CMS.L_SelectAllAltKey_TEXT="false";Strings.CMS.L_SpellCheckKey_VALUE="0x76";Strings.CMS.L_Callout_Usage_Count="<p>{0}</p>view\|\|<p>{0}</p>views";Strings.CMS.L_NoElementStylesWereRemoved_TEXT="The selection did not contain any instances of element styles to remove.";Strings.CMS.L_DecWidthAltKey_TEXT="false";Strings.CMS.L_ExpandedTagNameH4="Heading 4";Strings.CMS.L_DecWidthShiftKey_TEXT="true";Strings.CMS.L_EditImageRenditionsAction="Edit Renditions";Strings.CMS.L_TabBackKey_TEXT="N";Strings.CMS.L_SvrBusySpellchecker_TEXT="The spell checking server was busy";Strings.CMS.L_RemoveLinkShiftKey_TEXT="false";Strings.CMS.L_Show_TEXT="Show";Strings.CMS.L_Title_TEXT="Title:";Strings.CMS.L_ShowSpecific_TEXT="Show the selected item in navigation";Strings.CMS.L_DecHeightShiftKey_TEXT="true";Strings.CMS.L_ChangeColumnWidthAndRowHeightKey_TEXT="W";Strings.CMS.L_UnlinkToolTip_TEXT="Remove Hyperlink";Strin

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	186722
Entropy (8bit):	5.127936869447186
Encrypted:	false
SSDEEP:	1536:qofu83Pw6jz1+8YZwf7BN6pJsnNxezT8+zacaS8Ob4C//aT5L4DK:883z5+nMDEuvezT8++6kZCe
MD5:	2DE2482829622DE740DB42E04CBCD047
SHA1:	2A88D65A01BDA232B97B24163F66BA7F90A63386
SHA-256:	947D9E7117E8528021EC98FBBD6FE75A4D393A699DFFFFB3A2803EAE42845CEB
SHA-512:	35A2B88CF1FD1505BAD30CF68FB235ED5E5029D4824EC8586452A53E820563229AEA06156B46702C5046DC4BCE0046DFC74E934E215BFDD040B2715D298E8886
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.25318.12009/1033/strings.js
Preview:	var Strings; if (Strings === undefined) { Strings=new Object(); }Strings.CMS=function(){};Strings.CMS.L_SelectAllAltKey_TEXT="false";Strings.CMS.L_SpellCheckKey_VALUE="0x76";Strings.CMS.L_Callout_Usage_Count="<p>{0}</p>view\|\|<p>{0}</p>views";Strings.CMS.L_NoElementStylesWereRemoved_TEXT="The selection did not contain any instances of element styles to remove.";Strings.CMS.L_DecWidthAltKey_TEXT="false";Strings.CMS.L_ExpandedTagNameH4="Heading 4";Strings.CMS.L_DecWidthShiftKey_TEXT="true";Strings.CMS.L_EditImageRenditionsAction="Edit Renditions";Strings.CMS.L_TabBackKey_TEXT="N";Strings.CMS.L_SvrBusySpellchecker_TEXT="The spell checking server was busy";Strings.CMS.L_RemoveLinkShiftKey_TEXT="false";Strings.CMS.L_Show_TEXT="Show";Strings.CMS.L_Title_TEXT="Title:";Strings.CMS.L_ShowSpecific_TEXT="Show the selected item in navigation";Strings.CMS.L_DecHeightShiftKey_TEXT="true";Strings.CMS.L_ChangeColumnWidthAndRowHeightKey_TEXT="W";Strings.CMS.L_UnlinkToolTip_TEXT="Remove Hyperlink";Strin

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 4730
Category:	dropped
Size (bytes):	1665
Entropy (8bit):	7.8887433425840845
Encrypted:	false
SSDEEP:	48:XCgINmlfnsz0OwnqV9T4+Z1t6kfcLOR7LgV:XhlvJOyqV9UCfyO12
MD5:	EB69D86E918C5776FDC33F839B0C114A
SHA1:	0E094ECFE371B5F9267778302EE6443C76B5BEC6
SHA-256:	112E2C223763BC148BB26D43C3B95E9CA5F9B6860BE5A4FD14617E204E0A5D28
SHA-512:	8277D72F775F90587B6C88992309B84242ED554EB82964D1D59D7826F985AA9F3CE323B6E362300997A4A63AA8DD6577CB36430417825AA04F69E2FC0B5D26BC
Malicious:	false
Reputation:	low
Preview:	...........W[o.6.~.`...$..K.z@..K..1b.....%.6...H.....l.q.......&..;....{.^#......w.G..P.....u.....e.....v.S..P.F4$....$@.!..e>.1.X.."....h$x...X.[.+.B.(y$.3T.s"@],...w...'`..).m..s.>Q.qE}.0....~0IP..".lB...........'t.Nd..y.6. I..q.&K...i..4n......S......>!@.5.8....g.....2...1 ..').u<....-..^_...A.+7..$b.!.!. ..I......A@.s4...g.px,...S6$..Uo.h.......T<.I.kk..$n....J..D.j..p.u.\)..&J.]...$.....d.b...;..(}.]~vn.R..2Wm.M<@.Nx.).\|u7....~7..%d?...n.~.~>.Qvhz.^.f...M3.......;;....o.n..I........Z{.0_.UP6.i.a..b.Z..m..J...8,.......m..n.k.@.{.>.d.PPPKK...o.rM.......D..._A3...r.....zn..q9...'_(.u......E[.\....T~].).M.C...Y.X\|X..(.w{]...d.(...c...<..p..L)OdQ.E..al=.../0#.q."i..`..c.N.......+.P.G.T9q.CG...l;S.h...q.....[...D...........D.....l...........2..O.;-~....(.3..D.T......b#.....j......{.g.g...(..Q..Tv..]o.4.Z....s.FL.h..D.bH/.C..<aj....u..=.F...R;lz.j.utT....F...ll..V..}.V.V....Q=h...k.R..v....^..r.}AA.......=.%.A..Z+..0;`..........3.a.[.q...

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
Category:	dropped
Size (bytes):	122193
Entropy (8bit):	7.997505273485286
Encrypted:	true
SSDEEP:	3072:H4ojbjOwCNA0H+Zenw+OA6m3SmjcnlDHG21TIoN:dHyi0Ity3wnY2lIA
MD5:	AF2A7A4929E13F15A045C8C8D80A4543
SHA1:	6A1EC81A5085D0846C77DD616AE686FF732C32D6
SHA-256:	EB47C5509CEF44C582EF8ABB8C58766EA6118AD40B0FFC22A7652ED1DC6FEE8B
SHA-512:	D3B1FC08CB7DDE27E9A16B749B0024A9F11D5067B0D023F8EB2E468533297DFC5BD7739C9B696F8D11D269350FA5F2D329FE6ABC4AB679888FDC97B2450DB336
Malicious:	false
Reputation:	low
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.QX..................Oix..).NK7...KW...........`....G/..=......[..R......Y....KS.7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...a.^.]..a.X&......2.o...$,..s..l<^0)..1...Yu..w.$..0c.=c.}...xT"d....{..@.&.. .es0q.$bl.D..1:z+y..t.F..X.....qn.../fUI...q....r.f.wk..Q.Y.I2.....<.GU'...\|..1t.y...{....w..y.s.+.t5.A.J.............$...}...k.......tu........;Vf...]...\|.Q......Z.].^...q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+..*T.....p....S...qR..+K1@k..mkQo...A........]p_.X2........B.....I..3..7..]d....@.bX....z.g...\|..V-K[..^(..y...^N.^..oJF.kQ.P.R..F..om.B.pL.<F....R...(..i..,......I.F< ..T...`1.W3....L....+.S.M.c....110..........H....E,O..v..l..=...H$.J..J....4.C..dzPI..S.B@RJ.V>..GJ."/.eEwC..Q}d.k......KN\|.i...=.....!.V....<%J.D......b

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
Category:	dropped
Size (bytes):	254
Entropy (8bit):	7.066074991728423
Encrypted:	false
SSDEEP:	6:XtS8G99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:XAH99kRX1YQBDFCnDXdWYtrE
MD5:	847A4212B99B9076EE39328B24CD30AF
SHA1:	73F15078CF1D396485F644A79B6E25EF0637685D
SHA-256:	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
SHA-512:	9AF77E9ED8BD9A39A47F36AAC2D01B5AF5D56C04CD933427DF95CC80904D7EE7AC3F7F9443D8AEF236CC84FB4DC4CC335AF0BF8F9BC0C13D720187096D149220
Malicious:	false
Reputation:	low
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46090)
Category:	downloaded
Size (bytes):	141866
Entropy (8bit):	5.429983887489752
Encrypted:	false
SSDEEP:	1536:PyeDOMSQ6fTPRUbx3XCg/MJA5N4ii5WLeV5guLDY2Js0VgtWiTJmxyCXP3onrGGW:wMc1g/Mq5p1Mv+UyJbBw+Icwf
MD5:	2509D4C564AFC2C77D16BA6CA509B39F
SHA1:	201F1D80F8EEA9F5E8A7A7224CFF18674344F886
SHA-256:	D468D9F009E53FE1C47B9D6FDEFA3FF1A8C239973F11A6F892848E341EA17CCD
SHA-512:	C928C36D58BB0B2740E9BE3F3CA3F49624253F8DAD93BA7524E55F24CCCAF630E35FCA8C596CBCE50A0C1214C4986034FD3E26D98F759949C179C54009D5D93E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113401
Category:	downloaded
Size (bytes):	20414
Entropy (8bit):	7.979508934961097
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IMU7ULgCsHqZo9v8:9CGEiL/w7R8DW9Z5BU7UMZHqok
MD5:	48981D3CF57E7C58CA7E3E851EF9354E
SHA1:	73593DE7633B10F9FFD0EF0E46280FA40FF433FF
SHA-256:	8A5E756923CC5C3F013862427B7622F58A52501C5A6017FFF2FDB2AFD94A10C2
SHA-512:	4E2B6EA222CE77E6EC12E059362DDDEA13758CDC77259FF5CF449BED5A1677E112CF49CD7ED7B1378F96FFD7C5E21BE66D2CA7EB2A9CD8026732F867FB5AE8B1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23437), with CRLF line terminators
Category:	downloaded
Size (bytes):	23594
Entropy (8bit):	5.107347306409284
Encrypted:	false
SSDEEP:	384:zyWvVsT5pTtxJOyNm7lMqasjI8LWv3n8wyM:zJsT5pTt7kK+M
MD5:	964FCB2BAF87049DC68975291AE89431
SHA1:	D0CD8C989D44BC531472B632868D3FB2DE4B3184
SHA-256:	B8F7BD568E379502CF0C00027581D2761C7DC14B166F5D25FC048A0B56B7BFBB
SHA-512:	03CB58D197A776F9C315C2A14B9C034D88C7B7E9F4247C5698396F4FE7363A22FC2042A24C02A245C7E035DD2862F88E8EF46A7E5A269EDC2B69E39752A52987
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.25318.12009/1033/initstrings.js
Preview:	var Strings; if (Strings === undefined) { Strings=new Object(); }Strings.STS=function(){};Strings.STS.L_NewTab="New tab";Strings.STS.L_CalloutLastEditedNameAndDate="Changed by ^1 on ^2";Strings.STS.L_CalloutSourceUrlHeader="Location";Strings.STS.L_SPDiscBestUndo="Remove best reply";Strings.STS.L_SPClientManage="manage";Strings.STS.L_SPAddNewWiki="new Wiki page";Strings.STS.L_SPCategorySortRecent="Recent";Strings.STS.L_ViewSelectorTitle="Change View";Strings.STS.L_SPDiscNumberOfLikes="{0} likes\|\|{0} like\|\|{0} likes";Strings.STS.L_Timeline_DfltViewName="Timeline";Strings.STS.L_TimelineToday="Today";Strings.STS.L_SPDiscNoPreviewAvailable="No preview available for this reply";Strings.STS.L_NODOCView="There are no documents in this view.";Strings.STS.L_SPBlogPostAuthorCategories="by {0} in {1}";Strings.STS.L_SPBlogsNoItemsInCategory="There are no posts in this category.";Strings.STS.L_QRCodeDescription="Scan this QR code with your phone or tablet to open {0}";Strings.STS.L_RelativeDateTime

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	dropped
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 102804
Category:	downloaded
Size (bytes):	25609
Entropy (8bit):	7.992070293592458
Encrypted:	true
SSDEEP:	768:65FO8CctusRS+4iLLuVC9Vri5MLPMTleAD5:8FbxwsR/4iAz5MbMl5
MD5:	B62553925BD98826C60457D2EB6B9A46
SHA1:	84DBBB6D9B36A587C21B5A56B1D9E587E33BA943
SHA-256:	C58166FE4DF4BA8F25A960C21451EAF841D97F6F552F104E43431C9DB1C2E2CC
SHA-512:	7B6872144AE308224FF671A1EC63F040A40115888790CF6834AD85D517471CE5DAD3EC297EE751FB196B55118A181017151F7F06FCE0F2F26FF94E8EEC070033
Malicious:	false
Reputation:	low
URL:	https://blsrailno-my.sharepoint.com/ScriptResource.axd?d=Y95KWyn7ekYuwqxi5xwzpQ89_l89h1UBww-3bDCQj9NMZpziHZD9vXBTpP8g1aDemgZgbhhM0qshxRyh9vSI2xCMiHT6hhgkhUBTLFHAyzzITv1_EekQYaUkLSEtWv8MG4xrOoVqjgOAoesh0S0wth_SGHj9izKFfkE1qf5qOOpZqim4wiZYp_Q2PCtWNR0E0&t=7a0cc936
Preview:	............r.I.(.>f..d..B6. )U/.(....mGRuw.... I..B..X...<.O..p}.=#.P.>s.Y...D,..........................'.......;.'..2.Uu5.C..%..v.M&;T...u1.T.=...m....'_z.......4.&?~.__....".db00..IR..\|.(tj6+.y.$.L.$..."..FIx3+..tG%.7...N.'..........A9....9;.O...j...Y\|8.........LW........h&.%WW...\|\.Q..Tr....$\..?-&....}O...w..$R}....W.k.+.._..q...P..dR......`^.j]0.L..9......)...."...I....,.K..j...`1.a9-.`..-p..O..t...\|Bo..Uu.~.t...uB9S.J.o..Fe<.....A.SM.....d>.].HO..Qx...ao....a.J..h6K..q7.N.n'..Ga78....v..n...>..0.I.X?...$=...x..H..&.V.+.h..GyTJ....AT...x.Jl...X..t.H4...$9..^u....r9rq3.._..a...^I.{{.Ch....@.l.....@..BW.[..8~6.U3].I#....8....H`...4..I..6...I...Q1...W^]>...P.KJ.L......A...>.@hf.M...RP..)m.F...Wp{.!.R.".j.....!soO..]k...a."eo.S,...G\|n.\|!F[..O../.aR...$.\..4.N.-p1..}...2...r\a[`e.E..{H..?.....J.ak.Y...P......DP.d.?...<..Y.8....%d...@..e.....exc..g...b.....<z....7*8!...n..wG0.C..f..Y5....qE..p....2.rH-..r.S........q..R.$Q^q....!....

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35238), with no line terminators
Category:	dropped
Size (bytes):	35238
Entropy (8bit):	5.390650418562352
Encrypted:	false
SSDEEP:	768:PrxzCC2akwbs7lSZTprPaTrPyrfKwKTZiNOzpCk47S:hsp7ly9rP0S4pCkx
MD5:	C637DE6889D81964119BA1FD124E2454
SHA1:	5DB2B1681BE6FF9A7B26E269CD80D817D41A01BE
SHA-256:	18E8366C8C5590C3D056BA6CA9691B7471D6970EE00D0E22A4B68E517B54F087
SHA-512:	78288767F08DB38F6DC8C366546CECC05DF35C25BCD898B94DCCC5ECCB3ACD7807817BAF813BCA11F4CCAC169A980E4F10EBF4334000C4D2D0F74DCC30BB36EE
Malicious:	false
Reputation:	low
Preview:	var Theming={__namespace:true};Theming_module_def();function Theming_module_def(){Theming.ApplyThemeToCss=tb;Theming.ReplaceCssTextForElement=J;Theming.ThemeInfo=E;Theming.ImageProcessor=R;Theming.Colors={Color:a,ColorApplication:x,HslColor:h};function cb(d,c,e){for(var b=true,a=0;a<c.length;a++)if(d.charCodeAt(e+a)!==c.charCodeAt(a)){b=false;break}return b}var c={text:0,comment:1,string:2,url:3,right_par:4,font_family:5,rgb:6,rgba:7,colon:8,semicolon:9,right_curly:10,color:11};function d(a,b){this.kind=a;this.text=b}function Db(b){var e,a,g,f,l="*/",u="url(",i=")",j="font-family",t="rgb(",s="rgba(",o="#",w=":",y=";",x="}",k=new d(c.text,"");if(!Boolean(b))b="";a=0;f=b.length;m.prototype={kind:0,text:"",getToken:function(){return null}};function m(){}var r={"/":{},"'":{},'"':{},"#":{},")":new d(c.right_par,")"),";":new d(c.semicolon,";"),":":new d(c.colon,":"),"}":new d(c.right_curly,"}"),u:{getToken:q},f:{getToken:n},r:{getToken:p}};function h(c){var a=b.indexOf(")",c);if(a<0)a=f;retu

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://blsrailno-my.sharepoint.com/WebResource.axd?d=-bVcVLsQPGhVD_FPS-Lpzf2QoNfYWRIQPIhg8fEJvuU63gpMUc-aN-bVZ2st-sDtVoGX2V0ieSMFB34YQGpme6qqzNPQxRnnJ_sYmvGtX2w1&t=638611486345608193
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 102804
Category:	dropped
Size (bytes):	25609
Entropy (8bit):	7.992070293592458
Encrypted:	true
SSDEEP:	768:65FO8CctusRS+4iLLuVC9Vri5MLPMTleAD5:8FbxwsR/4iAz5MbMl5
MD5:	B62553925BD98826C60457D2EB6B9A46
SHA1:	84DBBB6D9B36A587C21B5A56B1D9E587E33BA943
SHA-256:	C58166FE4DF4BA8F25A960C21451EAF841D97F6F552F104E43431C9DB1C2E2CC
SHA-512:	7B6872144AE308224FF671A1EC63F040A40115888790CF6834AD85D517471CE5DAD3EC297EE751FB196B55118A181017151F7F06FCE0F2F26FF94E8EEC070033
Malicious:	false
Reputation:	low
Preview:	............r.I.(.>f..d..B6. )U/.(....mGRuw.... I..B..X...<.O..p}.=#.P.>s.Y...D,..........................'.......;.'..2.Uu5.C..%..v.M&;T...u1.T.=...m....'_z.......4.&?~.__....".db00..IR..\|.(tj6+.y.$.L.$..."..FIx3+..tG%.7...N.'..........A9....9;.O...j...Y\|8.........LW........h&.%WW...\|\.Q..Tr....$\..?-&....}O...w..$R}....W.k.+.._..q...P..dR......`^.j]0.L..9......)...."...I....,.K..j...`1.a9-.`..-p..O..t...\|Bo..Uu.~.t...uB9S.J.o..Fe<.....A.SM.....d>.].HO..Qx...ao....a.J..h6K..q7.N.n'..Ga78....v..n...>..0.I.X?...$=...x..H..&.V.+.h..GyTJ....AT...x.Jl...X..t.H4...$9..^u....r9rq3.._..a...^I.{{.Ch....@.l.....@..BW.[..8~6.U3].I#....8....H`...4..I..6...I...Q1...W^]>...P.KJ.L......A...>.@hf.M...RP..)m.F...Wp{.!.R.".j.....!soO..]k...a."eo.S,...G\|n.\|!F[..O../.aR...$.\..4.N.-p1..}...2...r\a[`e.E..{H..?.....J.ak.Y...P......DP.d.?...<..Y.8....%d...@..e.....exc..g...b.....<z....7*8!...n..wG0.C..f..Y5....qE..p....2.rH-..r.S........q..R.$Q^q....!....

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 11:38:19.827159882 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 7, 2024 11:38:19.827323914 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 7, 2024 11:38:20.155318022 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 7, 2024 11:38:29.283575058 CEST	49713	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:29.283612013 CEST	443	49713	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:29.283674955 CEST	49713	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:29.284297943 CEST	49713	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:29.284308910 CEST	443	49713	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:29.435177088 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 7, 2024 11:38:29.512969017 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 7, 2024 11:38:29.755182981 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 7, 2024 11:38:30.084135056 CEST	443	49713	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:30.084203005 CEST	49713	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:30.089715004 CEST	49713	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:30.089720964 CEST	443	49713	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:30.090127945 CEST	443	49713	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:30.092720985 CEST	49713	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:30.092777014 CEST	49713	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:30.092782021 CEST	443	49713	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:30.093070984 CEST	49713	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:30.139395952 CEST	443	49713	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:30.267847061 CEST	443	49713	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:30.268516064 CEST	443	49713	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:30.268647909 CEST	49713	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:30.269278049 CEST	49713	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:30.269289017 CEST	443	49713	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:30.269314051 CEST	49713	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:30.860153913 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:30.860194921 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:30.860352039 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:30.860625029 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:30.860658884 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:30.860821962 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:30.860837936 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:30.860846043 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:30.860984087 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:30.860995054 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:31.402479887 CEST	443	49706	173.222.162.64	192.168.2.6
Oct 7, 2024 11:38:31.402612925 CEST	49706	443	192.168.2.6	173.222.162.64
Oct 7, 2024 11:38:31.417732954 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:31.420615911 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:31.420934916 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:31.420967102 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:31.421050072 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:31.421084881 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:31.421885014 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:31.421964884 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:31.421976089 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:31.422029972 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:31.424634933 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:31.424715996 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:31.424822092 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:31.426567078 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:31.426721096 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:31.471409082 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:31.471879959 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:31.471889973 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:31.471894979 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:31.471908092 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:31.518534899 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:31.518538952 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.034899950 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.035681009 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.035692930 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.035729885 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.035768986 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.035809994 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.035825968 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.035850048 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.036480904 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.036490917 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.036536932 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.092020988 CEST	49720	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.092076063 CEST	443	49720	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.092143059 CEST	49720	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.092231035 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.092459917 CEST	49720	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.092479944 CEST	443	49720	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.128973961 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.129010916 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.129093885 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.129126072 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.129333973 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.129359961 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.129396915 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.129405022 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.129420042 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.131064892 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.131143093 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.131151915 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.131944895 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.132030010 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.132040024 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.135441065 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.184437037 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.215763092 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.215790987 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.215900898 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.215922117 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.215946913 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.215979099 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.215993881 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.215993881 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.216000080 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.216022015 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.216041088 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.223287106 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.223392963 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.223403931 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.223795891 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.223851919 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.223859072 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.223927021 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.223978043 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.223985910 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.224941969 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.225008011 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.225016117 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.225739956 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.225795984 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.225804090 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.225868940 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.225930929 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.225938082 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.260945082 CEST	49721	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.260982990 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.261050940 CEST	49721	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.261362076 CEST	49721	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.261373997 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.262311935 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.262321949 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.262376070 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.262804985 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.262816906 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.268440962 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.302340984 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.302375078 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.302423000 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.302470922 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.302479029 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.309660912 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.309720993 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.309730053 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.317583084 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.317660093 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.317673922 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.318238020 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.318304062 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.318370104 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.319150925 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.319184065 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.358995914 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.388601065 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.388633966 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.388679981 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.388722897 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.388729095 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.412677050 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.412733078 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.412744045 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.412751913 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.412771940 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.412790060 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.412803888 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.412811995 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.412832975 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.413371086 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.413412094 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.413429022 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.413444042 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.413469076 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.414369106 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.414408922 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.414432049 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.414439917 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.414467096 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.417696953 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.417757034 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.417794943 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.417819023 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.417830944 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.418174028 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.418215990 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.418231964 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.418262959 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.418272018 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.419156075 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.419194937 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.419226885 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.419234991 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.419261932 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.419353008 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.419420004 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.419439077 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.419445038 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.419481039 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.419481039 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.419823885 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.419974089 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.420016050 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.469681025 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.521353960 CEST	49716	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.521418095 CEST	443	49716	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.528676987 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.528702974 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.528764009 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.528784037 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.528825998 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.528937101 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.528948069 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.528976917 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.528979063 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.529001951 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.529025078 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.529675961 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.529740095 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.622189045 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.622222900 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.622261047 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.622303009 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.622311115 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.623045921 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.623106003 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.623114109 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.623928070 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.623986006 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.623994112 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.665483952 CEST	443	49720	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.665843964 CEST	49720	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.665874004 CEST	443	49720	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.666224003 CEST	443	49720	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.670108080 CEST	49720	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.670196056 CEST	443	49720	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.670367002 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.673139095 CEST	49720	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.709070921 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.709105015 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.709122896 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.709136963 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.709160089 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.709172964 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.709178925 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.715708971 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.715823889 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.715832949 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.715842009 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.715868950 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.716393948 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.716443062 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.716447115 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.716465950 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.716487885 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.717117071 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.717170000 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.717176914 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.717262983 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.717315912 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.717324972 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.718153000 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.718210936 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.718219042 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.719027042 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.719083071 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.719090939 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.719405890 CEST	443	49720	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.719852924 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.719911098 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.719922066 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.763957977 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.802254915 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.802290916 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.802335024 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.802369118 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.802373886 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.810081005 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.810182095 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.810189962 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.810199976 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.810264111 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.810270071 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.810292959 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.810322046 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.810334921 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.810349941 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.810456038 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.810514927 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.810524940 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.810549021 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.810606956 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.810616016 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.824119091 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.825443029 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.825474024 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.826375008 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.826450109 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.827833891 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.827903032 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.828191996 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.828201056 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.835032940 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.836086035 CEST	49721	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.836103916 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.836781979 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.838732004 CEST	49721	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.838824987 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.839446068 CEST	49721	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.858165979 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.872791052 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.876372099 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.878109932 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.878176928 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.878992081 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.879054070 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.879806995 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.879930973 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.880275011 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.880294085 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.887401104 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.904587984 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.904623985 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.904659033 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.904679060 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.904695034 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.904709101 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.904721022 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.904733896 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.904752970 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.904764891 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.904793978 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.904835939 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.904850960 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.904860020 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.904926062 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.905433893 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.905473948 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.905512094 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.905518055 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.905534029 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.905553102 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.906469107 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.906482935 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.906523943 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.906531096 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.906558037 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.906569004 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.907339096 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.907352924 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.907397032 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.907404900 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.907625914 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.907937050 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.907953024 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.907991886 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.907999992 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.908042908 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.908771992 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.908792973 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.908823967 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.908830881 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.908843994 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.908879042 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.909739971 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.909754038 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.909806013 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.909811974 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.910028934 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.915987015 CEST	443	49720	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.916071892 CEST	443	49720	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.916223049 CEST	49720	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.920340061 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.937587023 CEST	49720	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.937621117 CEST	443	49720	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.991270065 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.991333961 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.991393089 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.991414070 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.991432905 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.991456985 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.991589069 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.991641998 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.991666079 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.991673946 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.991703987 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.991719961 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.991775990 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.991822004 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.991843939 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.991851091 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.991864920 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.991890907 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.991941929 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.991991043 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.992008924 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.992019892 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.992041111 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.992944956 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:32.993098974 CEST	443	49717	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:32.993177891 CEST	49717	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.058407068 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.058442116 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.058485031 CEST	49721	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.058501005 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.059267998 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.059317112 CEST	49721	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.059325933 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.059432983 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.059592962 CEST	49721	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.059928894 CEST	49721	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.059947968 CEST	443	49721	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.063222885 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.063288927 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.063342094 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.063350916 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.063489914 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.063843012 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.063863039 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.063908100 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.063945055 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.063951015 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.064604044 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.064675093 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.064682007 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.064857006 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.120225906 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.120244980 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.120330095 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.120393991 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.120723009 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.121474981 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.121481895 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.121540070 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.121556044 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.125267029 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.125351906 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.125369072 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.125433922 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.149271965 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.149347067 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.149409056 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.149436951 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.149521112 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.154314041 CEST	49722	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.154347897 CEST	443	49722	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.184623003 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:33.184669018 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:33.184735060 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:33.185096025 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:33.185117960 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:33.206764936 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.206845045 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.207123995 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.207166910 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.207248926 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.214960098 CEST	49727	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.214998960 CEST	443	49727	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.543370008 CEST	49729	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:38:33.543406010 CEST	443	49729	142.250.186.164	192.168.2.6
Oct 7, 2024 11:38:33.543550014 CEST	49729	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:38:33.543832064 CEST	49729	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:38:33.543849945 CEST	443	49729	142.250.186.164	192.168.2.6
Oct 7, 2024 11:38:33.641761065 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.641817093 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.641874075 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.642201900 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.642225981 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.642334938 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.642653942 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.642748117 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.642824888 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.643271923 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.643281937 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.643758059 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.643776894 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.644107103 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:33.644145966 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:33.893440008 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:33.893551111 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:33.898819923 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:33.898839951 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:33.899307013 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:33.916701078 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:33.938771963 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:33.938801050 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:33.938872099 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:33.941590071 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:33.941603899 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:33.963402987 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.034387112 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.034451962 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.034492970 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.034526110 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.034569979 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.034614086 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.034614086 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.120975018 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.121072054 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.121102095 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.121165991 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.126916885 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.126966953 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.127002001 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.127016068 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.127037048 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.127051115 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.127051115 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.184541941 CEST	443	49729	142.250.186.164	192.168.2.6
Oct 7, 2024 11:38:34.191756964 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.195053101 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.207403898 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.213464022 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.213510990 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.213546038 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.213567019 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.213587999 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.213610888 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.214755058 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.214797020 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.214838028 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.214845896 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.214875937 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.214885950 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.215343952 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.215403080 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.215429068 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.215437889 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.215465069 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.215488911 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.219177961 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.219219923 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.219271898 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.219279051 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.219311953 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.219326019 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.224060059 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.224076986 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.224185944 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.224200010 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.224339962 CEST	49729	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:38:34.224349976 CEST	443	49729	142.250.186.164	192.168.2.6
Oct 7, 2024 11:38:34.224435091 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.224478006 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.225640059 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.225723982 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.225727081 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.225801945 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.228003979 CEST	443	49729	142.250.186.164	192.168.2.6
Oct 7, 2024 11:38:34.228034973 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.228074074 CEST	49729	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:38:34.228105068 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.232965946 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.233089924 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.234899044 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.235018015 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.239535093 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.239679098 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.266866922 CEST	49729	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:38:34.267354965 CEST	443	49729	142.250.186.164	192.168.2.6
Oct 7, 2024 11:38:34.267813921 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.267824888 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.267867088 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.267877102 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.267946959 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.267977953 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.297476053 CEST	49737	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.297518969 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.297604084 CEST	49737	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.298127890 CEST	49737	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.298149109 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.304338932 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.304397106 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.304433107 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.304445982 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.304488897 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.304521084 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.305147886 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.305196047 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.305217981 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.305227041 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.305279016 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.305802107 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.305850983 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.305857897 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.305876970 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.305917978 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.306265116 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.306337118 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.306787014 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.306834936 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.306864023 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.306871891 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.306967974 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.307012081 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.307821989 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.307873964 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.307923079 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.307929993 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.307954073 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.307970047 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.308722973 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.308767080 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.308799028 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.308806896 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.308854103 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.309395075 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.309478045 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.309485912 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.309529066 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.309535980 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.309622049 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.309731007 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.309745073 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.309757948 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.309763908 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.311094046 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.311094046 CEST	49729	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:38:34.311130047 CEST	443	49729	142.250.186.164	192.168.2.6
Oct 7, 2024 11:38:34.311170101 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.311173916 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.356966019 CEST	49729	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:38:34.415323973 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.415375948 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.415440083 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.416789055 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.416831017 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.416956902 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.418102026 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.418163061 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.418428898 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.418457031 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.418481112 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.418628931 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.418637037 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.418659925 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.418675900 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.418996096 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.419006109 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.419325113 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.419353008 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.419524908 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.419550896 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.420037985 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.420056105 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.420696020 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:34.420706034 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:34.491731882 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.491755962 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.491919041 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.491952896 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.492007017 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.492160082 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.492180109 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.492196083 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.492227077 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.492254972 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.492261887 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.492863894 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.492928028 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.492942095 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.492995024 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.494709015 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.494770050 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.494826078 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.494852066 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.495253086 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.495574951 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.495599985 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.495621920 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.495630980 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.495654106 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.495784044 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.495834112 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.495935917 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.495949984 CEST	443	49731	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.495963097 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.495992899 CEST	49731	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.579859018 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.579891920 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.579963923 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.579993010 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.580187082 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.580235004 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.580317974 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.580337048 CEST	443	49732	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.580357075 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.580382109 CEST	49732	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.612004042 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:34.612075090 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:34.613590002 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:34.613598108 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:34.614106894 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:34.646240950 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:34.691401958 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:34.692933083 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.693028927 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.693083048 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.693093061 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.693147898 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.694186926 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.694195986 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.694216013 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.694245100 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.694259882 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.694274902 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.694281101 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.694303989 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.736407042 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.779233932 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.779244900 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.779268026 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.779285908 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.779292107 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.779330969 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.779336929 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.779459000 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.779503107 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.779860973 CEST	49730	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.779875040 CEST	443	49730	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.856180906 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.856431007 CEST	49737	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.856450081 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.856931925 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.857523918 CEST	49737	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.857609987 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.857784986 CEST	49737	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:34.878362894 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:34.878513098 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:34.878587961 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:34.878624916 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:34.878635883 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:34.878635883 CEST	49736	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:34.878643990 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:34.878648996 CEST	443	49736	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:34.899424076 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:34.918889046 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:34.918920040 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:34.918998003 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:34.920113087 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:34.920129061 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:35.072231054 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.073239088 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.074317932 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.074340105 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.075500965 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.075506926 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.076967955 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.077048063 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.077795029 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.077812910 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.078371048 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.078711033 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.078731060 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.079168081 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.079174042 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.085351944 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.085375071 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.085422039 CEST	49737	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:35.085445881 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.085762024 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.085783005 CEST	49737	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:35.085793018 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.085810900 CEST	49737	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:35.085829973 CEST	49737	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:35.086168051 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.086287975 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.086347103 CEST	49737	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:35.086617947 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.087475061 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.087508917 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.089006901 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.089018106 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.089396000 CEST	49737	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:35.089416981 CEST	443	49737	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.101988077 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.102528095 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.102546930 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.103079081 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.103085995 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.181184053 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.181361914 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.181513071 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.188868999 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.188916922 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.188998938 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.189021111 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.189038038 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.189064026 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.189088106 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.190804005 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.190821886 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.190912962 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.190978050 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.191088915 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.191154957 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.192637920 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.192661047 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.192676067 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.192683935 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.194505930 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.194534063 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.195637941 CEST	49739	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.195655107 CEST	443	49739	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.198402882 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.198431015 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.198517084 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.198533058 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.198587894 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.198601007 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.198632956 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.198693991 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.199600935 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.199690104 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.199826002 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.200716019 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.200764894 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.200877905 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.202964067 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.202996016 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.203296900 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.203433990 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.203449011 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.203737974 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.203771114 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.203902006 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.203937054 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.204288960 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.204303026 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.204334974 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.204349041 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.208045006 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.208066940 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.208112955 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.208385944 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.208396912 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.210617065 CEST	49755	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:35.210644007 CEST	443	49755	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.210772991 CEST	49755	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:35.211102962 CEST	49755	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:35.211117029 CEST	443	49755	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.213669062 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.213819981 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.213886976 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.214118958 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.214137077 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.214149952 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.214155912 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.217500925 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.217542887 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.217658043 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.218076944 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.218096972 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.555007935 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:35.555094957 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:35.768814087 CEST	443	49755	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.825459957 CEST	49755	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:35.866276979 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.867599964 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.889686108 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.891973019 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.902617931 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.919229031 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.919523954 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.934830904 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.934840918 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.939820051 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:35.939835072 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:35.940077066 CEST	49755	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:35.940088034 CEST	443	49755	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.940301895 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:35.941586018 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:35.941638947 CEST	443	49755	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.942620993 CEST	49755	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:35.942822933 CEST	443	49755	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.943331957 CEST	49755	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:35.944597006 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.944613934 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.945291996 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.945297956 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.945821047 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.945831060 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.946520090 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.946525097 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.946950912 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.946955919 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.947590113 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.947597027 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.948144913 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.948199987 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.948769093 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.948781967 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.949959040 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.949981928 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.950330973 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:35.950341940 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:35.983405113 CEST	443	49755	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:35.983424902 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:36.050141096 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.050319910 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.050410986 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.050476074 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.050497055 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.050512075 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.050518990 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.050771952 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.050935030 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.051011086 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.051100969 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.051150084 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.051182032 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.051198006 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.053035021 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.053122997 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.053143024 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.053180933 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.053227901 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.053277969 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.053719044 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.053719044 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.053733110 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.053744078 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.053809881 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.053838968 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.053994894 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.054012060 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.054023027 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.054133892 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.054152012 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.055656910 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.055813074 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.055861950 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.055872917 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.055886030 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.055926085 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.056049109 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.056049109 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.056087971 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.056112051 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.056128025 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.056176901 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.056212902 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.056255102 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.056272030 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.056665897 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.056665897 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.056678057 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.056689024 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.058311939 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.058336020 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.058415890 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.058507919 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.058521986 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.058922052 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.058934927 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.058986902 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.059082985 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.059094906 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.126926899 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:36.127013922 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:36.127113104 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:36.127877951 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:36.127896070 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:36.127909899 CEST	49746	443	192.168.2.6	184.28.90.27
Oct 7, 2024 11:38:36.127916098 CEST	443	49746	184.28.90.27	192.168.2.6
Oct 7, 2024 11:38:36.185689926 CEST	443	49755	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:36.185750008 CEST	443	49755	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:36.185825109 CEST	443	49755	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:36.185914040 CEST	49755	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:36.185925961 CEST	443	49755	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:36.185937881 CEST	49755	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:36.186172962 CEST	443	49755	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:36.186224937 CEST	49755	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:36.186739922 CEST	49755	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:36.186748981 CEST	443	49755	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:36.714804888 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.715343952 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.715364933 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.715823889 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.715827942 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.720376015 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.720829010 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.720864058 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.721399069 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.721417904 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.742552996 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.742923021 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.742938995 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.743275881 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.743282080 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.757550001 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.763834953 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.808546066 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.808562994 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.808940887 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.808945894 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.809596062 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.809612036 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.810014963 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.810019970 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.822734118 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.822894096 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.823014975 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.823015928 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.823015928 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.825516939 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.825562954 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.825618029 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.825803995 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.825814009 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.830213070 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.830280066 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.830332994 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.830413103 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.830430984 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.830447912 CEST	49759	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.830455065 CEST	443	49759	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.832576036 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.832597017 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.832655907 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.832804918 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.832812071 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.858568907 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.858737946 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.858792067 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.858882904 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.858892918 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.858907938 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.858912945 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.861836910 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.861871004 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.861922979 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.862056017 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.862066031 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.914038897 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.914241076 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.914355040 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.918454885 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.918622017 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.918723106 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.924824953 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.924855947 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.926110983 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.926117897 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.928653002 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.928713083 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.929390907 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.929656029 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.929682016 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.929745913 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.929936886 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.929955006 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:36.930078983 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:36.930097103 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.137938976 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.137963057 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.411237001 CEST	49770	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:37.411278963 CEST	443	49770	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:37.411497116 CEST	49770	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:37.412050962 CEST	49770	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:37.412064075 CEST	443	49770	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:37.508378029 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.508991957 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.509006977 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.509413004 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.509418011 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.516836882 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.517163992 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.517174006 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.517517090 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.517523050 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.518491983 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.518752098 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.518831015 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.519129038 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.519143105 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.589356899 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.589874983 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.589921951 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.590334892 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.590363979 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.598191977 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.598553896 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.598587990 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.598943949 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.598949909 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.626910925 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.627053976 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.627126932 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.627206087 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.627250910 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.627280951 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.627296925 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.627985954 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.628150940 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.628200054 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.629694939 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.629760981 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.631635904 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.632662058 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.632678986 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.632688999 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.632695913 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.633061886 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.633071899 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.633085966 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.633090019 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.635961056 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.635983944 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.635996103 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.636003017 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.636039972 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.636061907 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.636183977 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.636199951 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.636398077 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.636411905 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.636594057 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.636641979 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.636694908 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.636836052 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.636842966 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.917258978 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.917344093 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.917515039 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.917522907 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.917682886 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.917742968 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.917875051 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.917875051 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.917916059 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.917949915 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.919380903 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.919380903 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.919408083 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.919420958 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.928129911 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.928168058 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.928224087 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.929990053 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.930085897 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.930093050 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.930103064 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:37.930160046 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.930320024 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:37.930366993 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.202131987 CEST	443	49770	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:38.202229977 CEST	49770	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:38.231369019 CEST	49770	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:38.231396914 CEST	443	49770	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:38.232183933 CEST	443	49770	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:38.260235071 CEST	49770	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:38.260289907 CEST	49770	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:38.260303974 CEST	443	49770	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:38.260402918 CEST	49770	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:38.292500019 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.292983055 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.293003082 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.293404102 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.293410063 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.303524971 CEST	443	49770	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:38.321541071 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.322042942 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.322061062 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.322452068 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.322458029 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.348212004 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.348787069 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.348829985 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.349158049 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.349165916 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.399703026 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.399758101 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.399813890 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.400008917 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.400024891 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.400072098 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.400079012 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.402621984 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.402715921 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.402810097 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.402960062 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.402997971 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.431466103 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.431544065 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.431632996 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.431690931 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.431698084 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.431711912 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.431719065 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.434045076 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.434075117 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.434130907 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.434303999 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.434313059 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.436008930 CEST	443	49770	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:38.436425924 CEST	49770	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:38.436433077 CEST	443	49770	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:38.436467886 CEST	49770	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:38.436476946 CEST	443	49770	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:38.436485052 CEST	443	49770	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:38.436489105 CEST	49770	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:38.462095022 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.462259054 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.462315083 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.462385893 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.462385893 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.462405920 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.462416887 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.464291096 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.464364052 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.464443922 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.464596987 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.464636087 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.584719896 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.585215092 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.585282087 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.585571051 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.585587025 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.593624115 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.593924046 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.593933105 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.594273090 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.594276905 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.697276115 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.697352886 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.697408915 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.697616100 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.697664022 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.697700977 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.697717905 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.700464010 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.700501919 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.700561047 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.700809956 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.700828075 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.703839064 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.703907967 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.704036951 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.704072952 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.704072952 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.704097033 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.704103947 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.706249952 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.706259966 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:38.706325054 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.706478119 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:38.706495047 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.058835983 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.059319019 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.059381962 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.059695005 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.059711933 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.100590944 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.100981951 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.100987911 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.101402044 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.101404905 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.128380060 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.129136086 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.129151106 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.129760027 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.129764080 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.167248011 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.167318106 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.167412043 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.167619944 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.167619944 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.167649031 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.167659998 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.170968056 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.170999050 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.171066046 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.171286106 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.171298981 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.210429907 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.210598946 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.210745096 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.210773945 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.210787058 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.210798025 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.210803032 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.213320971 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.213355064 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.213412046 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.213526011 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.213546038 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.238795996 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.238869905 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.239049911 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.239049911 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.239049911 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.241281986 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.241318941 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.241374016 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.241539955 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.241553068 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.355551958 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.356334925 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.356380939 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.356978893 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.356987953 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.383852005 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.384294987 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.384327888 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.384632111 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.384641886 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.463813066 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.463872910 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.463920116 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.464113951 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.464132071 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.464147091 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.464154005 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.466418028 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.466454983 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.466552973 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.466653109 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.466666937 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.467048883 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.467060089 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.495277882 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.495559931 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.495621920 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.495695114 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.495702982 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.495716095 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.495721102 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.498354912 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.498383999 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.498842955 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.498970032 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.498986006 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.833108902 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.833738089 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.833750010 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.834211111 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.834213972 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.898899078 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.899277925 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.899297953 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.899660110 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.899666071 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.932306051 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.932655096 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.932676077 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.932987928 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.932991982 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.940922976 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.940999031 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.941138029 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.941184044 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.941184044 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.941196918 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.941205025 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.943423033 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.943475962 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:39.943553925 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.943666935 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:39.943687916 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.012070894 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.012238979 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.012571096 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.012734890 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.012747049 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.012782097 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.012789011 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.018131018 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.018191099 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.018244028 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.018381119 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.018398046 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.047657967 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.047708988 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.047761917 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.047919035 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.047933102 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.047941923 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.047946930 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.050250053 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.050286055 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.050431967 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.050587893 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.050605059 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.128791094 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.129220009 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.129231930 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.129590034 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.129594088 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.182249069 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.182641029 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.182661057 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.183166981 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.183172941 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.237457037 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.237508059 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.237590075 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.237740040 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.237756014 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.237763882 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.237768888 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.240315914 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.240394115 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.240474939 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.240631104 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.240667105 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.623553991 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.634350061 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.634363890 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.634816885 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.634821892 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.702172041 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.703907013 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.709311962 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.709332943 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.709780931 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.709784985 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.710167885 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.710201025 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.710577965 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.710586071 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.739113092 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.739196062 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.739444971 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.739475012 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.739475012 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.739486933 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.739497900 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.741422892 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.741451979 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.741647005 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.741749048 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.741759062 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.812381029 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.812441111 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.812511921 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.815604925 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.815757990 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.815824986 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.818272114 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.818294048 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.818308115 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.818315983 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.819482088 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.819482088 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.819493055 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.819504023 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.821564913 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.821660995 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.821738958 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.822159052 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.822194099 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.822318077 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.822359085 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.822455883 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.822455883 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.822484970 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.833333015 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.833389044 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.833508968 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.833532095 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.833545923 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.833558083 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.833564997 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.835376024 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.835412025 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.835594893 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.835665941 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.835674047 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.917954922 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.918381929 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.918428898 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:40.919095993 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:40.919104099 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.030349016 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.030406952 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.030620098 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.077017069 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.077040911 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.084197044 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.084294081 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.084387064 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.084548950 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.084589005 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.405702114 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.409015894 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.409040928 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.409427881 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.409432888 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.471482038 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.471960068 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.471973896 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.472271919 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.472276926 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.479367018 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.479970932 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.480034113 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.480360985 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.480376959 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.486116886 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.486485958 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.486496925 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.486963987 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.486968994 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.515228033 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.515317917 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.515630007 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.515674114 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.515693903 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.515705109 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.515711069 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.518309116 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.518343925 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.518409967 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.518680096 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.518692970 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.580817938 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.580876112 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.581176043 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.581176043 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.581176043 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.583473921 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.583518982 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.583581924 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.585701942 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.585716963 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.588593960 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.588754892 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.588831902 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.588922024 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.588922024 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.588968039 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.588996887 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.590801954 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.590810061 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.590882063 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.591073036 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.591084957 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.596402884 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.596537113 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.596740007 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.596779108 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.596779108 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.596791983 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.596798897 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.598362923 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.598391056 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.598464012 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.598618031 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.598627090 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.764920950 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.767676115 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.767712116 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.768127918 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.768140078 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:41.793996096 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:41.794013977 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.064821959 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.064881086 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.064958096 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.065140963 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.065188885 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.065221071 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.065237045 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.067789078 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.067820072 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.067989111 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.068130970 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.068147898 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.258663893 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.259073019 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.259104013 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.259968996 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.260294914 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.260304928 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.260462999 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.260468960 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.260687113 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.260693073 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.263087034 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.263355970 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.263370991 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.263675928 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.263679981 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.372210979 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.372364998 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.372437000 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.372458935 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.372458935 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.372472048 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.372478962 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.373094082 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.373249054 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.373317957 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.373697042 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.373716116 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.373728037 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.373734951 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.375734091 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.375751019 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.375834942 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.376549006 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.376563072 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.377253056 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.377300978 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.377660990 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.377779961 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.377794981 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.386353970 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.386789083 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.386795998 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.388370991 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.388374090 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.412076950 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.412131071 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.412353039 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.412415028 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.412424088 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.412435055 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.412441969 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.414796114 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.414829969 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.414968967 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.415086985 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.415096998 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.496577978 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.496656895 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.496721029 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.496962070 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.496979952 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.496992111 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.496997118 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.499789953 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.499877930 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.499963045 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.500185966 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.500226021 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.751234055 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.751876116 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.751888037 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.753650904 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.753655910 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.864610910 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.864681005 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.864953041 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.864953041 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.865679026 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.865689993 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.867957115 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.868052959 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:42.868232965 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.868310928 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:42.868326902 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.026369095 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.027247906 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.027247906 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.027261019 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.027276993 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.035024881 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.035631895 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.035662889 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.035808086 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.035813093 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.072618008 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.073368073 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.073369026 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.073379040 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.073391914 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.135216951 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.135314941 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.135534048 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.135914087 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.135929108 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.136023045 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.136029959 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.139631987 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.139673948 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.139938116 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.140305996 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.140319109 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.144140005 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.144495010 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.146294117 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.146294117 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.147629023 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.147650957 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.148874998 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.148907900 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.150696993 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.150696993 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.150723934 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.152208090 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.153044939 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.153044939 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.153114080 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.153162003 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.180963039 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.181118011 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.181324959 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.181416988 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.181416988 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.181433916 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.181441069 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.185002089 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.185044050 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.185195923 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.185417891 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.185436010 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.260272026 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.260428905 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.260643959 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.260644913 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.260808945 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.260849953 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.263602018 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.263638973 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.263897896 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.263897896 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.263930082 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.503062010 CEST	49815	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:43.503165007 CEST	443	49815	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:43.503170967 CEST	49816	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:43.503268957 CEST	443	49816	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:43.503405094 CEST	49816	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:43.503427029 CEST	49815	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:43.503860950 CEST	49816	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:43.503895044 CEST	443	49816	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:43.504676104 CEST	49815	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:43.504712105 CEST	443	49815	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:43.558092117 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.559145927 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.559146881 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.559214115 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.559256077 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.683286905 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.683351040 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.683716059 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.683810949 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.683852911 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.683890104 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.683904886 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.686870098 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.686922073 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.687005997 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.687143087 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.687160015 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.797831059 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.799211025 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.799232006 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.800952911 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.800957918 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.802288055 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.802834034 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.802850008 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.803246021 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.803250074 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.844176054 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.852432966 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.852459908 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.852874994 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.852880001 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.905950069 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.906128883 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.906521082 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.908523083 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.908523083 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.908545971 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.908555984 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.909621954 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.909787893 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.909847975 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.910370111 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.910387993 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.910393953 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.910398960 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.911528111 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.911576986 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.911662102 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.912626982 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.912642956 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.913789034 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.913820982 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.915258884 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.915258884 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.915286064 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.935870886 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.936225891 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.936244011 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.936887026 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.936891079 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.954165936 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.954323053 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.954560995 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.954804897 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.954819918 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.954824924 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.954828978 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.957341909 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.957384109 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:43.957539082 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.957675934 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:43.957695961 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.049905062 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.050061941 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.050151110 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.050192118 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.050192118 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.050205946 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.050215006 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.052562952 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.052640915 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.052723885 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.052870989 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.052886963 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.054622889 CEST	443	49816	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.054925919 CEST	49816	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.054991961 CEST	443	49816	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.055350065 CEST	443	49816	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.055661917 CEST	49816	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.055736065 CEST	443	49816	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.055784941 CEST	49816	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.080249071 CEST	443	49729	142.250.186.164	192.168.2.6
Oct 7, 2024 11:38:44.080343962 CEST	443	49729	142.250.186.164	192.168.2.6
Oct 7, 2024 11:38:44.080523968 CEST	49729	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:38:44.085827112 CEST	443	49815	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.086044073 CEST	49815	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.086065054 CEST	443	49815	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.086402893 CEST	443	49815	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.086694002 CEST	49815	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.086755991 CEST	443	49815	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.103420973 CEST	443	49816	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.109348059 CEST	49816	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.139693975 CEST	49815	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.341521025 CEST	443	49816	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.341590881 CEST	443	49816	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.341598988 CEST	49816	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.341640949 CEST	49816	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.343651056 CEST	49816	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.343672991 CEST	443	49816	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.346970081 CEST	49729	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:38:44.346997976 CEST	443	49729	142.250.186.164	192.168.2.6
Oct 7, 2024 11:38:44.347290039 CEST	49815	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.382672071 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.383580923 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.383605957 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.384458065 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.384462118 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.387420893 CEST	443	49815	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.500317097 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.500385046 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.500471115 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.520833969 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.520857096 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.527431965 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.527512074 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.527591944 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.527946949 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.527977943 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.571911097 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.572510958 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.572525978 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.573328972 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.573333025 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.574599028 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.574984074 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.575005054 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.578077078 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.578080893 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.598568916 CEST	443	49815	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.598648071 CEST	443	49815	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.598743916 CEST	49815	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.599684954 CEST	49815	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.599713087 CEST	443	49815	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.602220058 CEST	49823	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.602257013 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.602381945 CEST	49823	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.602695942 CEST	49823	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:44.602715015 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:44.670312881 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.670845032 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.670886993 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.671695948 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.671701908 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.683271885 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.683459044 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.683517933 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.683700085 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.683784962 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.683803082 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.683811903 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.683818102 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.683859110 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.683912992 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.687752008 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.687768936 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.687778950 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.687784910 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.691847086 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.691879988 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.692094088 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.693002939 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.693084955 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.693202972 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.693392038 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.693408966 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.693803072 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.693835974 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.739878893 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.740430117 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.740468979 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.741054058 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.741063118 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.785410881 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.785568953 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.785639048 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.850769997 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.850836039 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.850883007 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.921045065 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.921065092 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:44.921075106 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:44.921080112 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.041898012 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.041954041 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.136313915 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.136367083 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.136444092 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.141051054 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.141093016 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.141150951 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.141496897 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.141526937 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.142183065 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.142199039 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.151479959 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:45.151814938 CEST	49823	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:45.151840925 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:45.152152061 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:45.153331995 CEST	49823	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:45.153397083 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:45.154196024 CEST	49823	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:45.199405909 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:45.219702005 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.221153021 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.221220016 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.222507954 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.222521067 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.332528114 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.332653046 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.332717896 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.333197117 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.333197117 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.333230019 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.333252907 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.337980986 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.338013887 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.338084936 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.338239908 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.338255882 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.386703968 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.386718988 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.387130022 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.387170076 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.387355089 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.387391090 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.387497902 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.387509108 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.387792110 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.387797117 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.497713089 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.497880936 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.497945070 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.498037100 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.498055935 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.498065948 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.498070955 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.498260021 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.498414993 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.498475075 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.498514891 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.498514891 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.498534918 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.498557091 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.501338005 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.501373053 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.501380920 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.501388073 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.501435995 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.501456976 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.501579046 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.501590967 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.501741886 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.501749992 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.636610031 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:45.636637926 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:45.636650085 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:45.636696100 CEST	49823	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:45.636719942 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:45.636759996 CEST	49823	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:45.636969090 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:45.637044907 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:45.637087107 CEST	49823	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:45.786436081 CEST	49823	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:45.786463976 CEST	443	49823	13.107.136.10	192.168.2.6
Oct 7, 2024 11:38:45.786472082 CEST	49823	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:45.786513090 CEST	49823	443	192.168.2.6	13.107.136.10
Oct 7, 2024 11:38:45.797853947 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.799087048 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.799115896 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.800744057 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.800754070 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.843817949 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.854464054 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.854542017 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.854801893 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.854815960 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.905577898 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.905771017 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.905931950 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.913274050 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.913338900 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.913376093 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.913393974 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.940881968 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.940924883 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.940983057 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.946894884 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.946918011 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.962047100 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.962125063 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.962192059 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.962779045 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.962826967 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.962856054 CEST	49827	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.962872982 CEST	443	49827	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.969783068 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.969822884 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.969894886 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.970443964 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.970457077 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.985321045 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.986339092 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.986382008 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:45.986968040 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:45.986975908 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.094355106 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.094475985 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.094537020 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.095151901 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.095170975 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.095185041 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.095191956 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.100903988 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.100940943 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.101152897 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.101325035 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.101335049 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.154984951 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.157109022 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.157136917 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.157963037 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.157968044 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.158246040 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.158857107 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.158869028 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.159504890 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.159508944 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.262938023 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.263098955 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.263159990 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.263514042 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.263530016 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.263540030 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.263544083 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.269104958 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.269264936 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.269321918 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.269962072 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.270049095 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.270126104 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.270386934 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.270390034 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.270418882 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.270421982 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.270731926 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.270762920 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.273037910 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.273070097 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.273279905 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.273439884 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.273447990 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.605868101 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.607927084 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.607949972 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.608931065 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.608935118 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.624691963 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.626754045 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.626780033 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.627398014 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.627403975 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.717190981 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.717247963 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.717386007 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.720698118 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.720719099 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.720732927 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.720738888 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.726459026 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.726562023 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.726706982 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.727180004 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.727221012 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.734134912 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.734280109 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.734335899 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.734597921 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.734620094 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.734632015 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.734637022 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.736941099 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.736977100 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.737104893 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.737498045 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.737526894 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.758059025 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.758588076 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.758625984 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.758882999 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.758889914 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.876688957 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.876858950 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.876925945 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.876986980 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.877002954 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.877012014 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.877016068 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.880983114 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.881014109 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.881180048 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.881355047 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.881366968 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.935703039 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.936162949 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.936182976 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.936567068 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.936570883 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.969919920 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.970344067 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.970356941 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:46.970735073 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:46.970738888 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.042942047 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.043107033 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.043162107 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.043231964 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.043247938 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.043257952 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.043262959 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.045717001 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.045747042 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.045978069 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.045978069 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.046004057 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.085311890 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.085371971 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.085500002 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.085505009 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.085680008 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.085680008 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.085782051 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.085793972 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.088287115 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.088332891 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.088443041 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.088608027 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.088628054 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.282166958 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:47.282191038 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:47.282397985 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:47.282634974 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:47.282643080 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:47.408246994 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.412154913 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.412251949 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.413244009 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.413259029 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.418644905 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.419611931 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.419645071 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.420239925 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.420253038 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.519812107 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.519871950 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.520080090 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.520304918 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.520349979 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.520385981 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.520401955 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.524440050 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.524480104 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.524583101 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.524857998 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.524884939 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.531531096 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.531603098 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.531675100 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.535084009 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.535104036 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.535128117 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.535139084 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.538471937 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.538511038 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.539267063 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.539598942 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.539611101 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.548006058 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.548676014 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.548691034 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.549566031 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.549570084 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.617448092 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.618065119 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.618092060 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.618808985 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.618813038 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.655050993 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.655162096 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.655230045 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.655240059 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.655303001 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.655354977 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.655466080 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.655479908 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.655488968 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.655495882 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.661221981 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.661251068 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.661317110 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.661911011 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.661925077 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.737771034 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.737790108 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.737844944 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.737864971 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.737903118 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.738399029 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.738414049 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.738445044 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.738450050 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.744262934 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.744292021 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.744443893 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.744792938 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.744805098 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.758333921 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.759495974 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.759521961 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.760173082 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.760179043 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.869390011 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.869445086 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.869556904 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.869569063 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.869736910 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.869750023 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.869757891 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.870106936 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.870183945 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.870435953 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.877091885 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.877146959 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:47.877222061 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.877625942 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:47.877640963 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.125554085 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.125766993 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.125786066 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.127463102 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.127538919 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.129026890 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.129117966 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.129611015 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.129617929 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.179955006 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.180407047 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.180433989 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.180813074 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.180816889 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.184082031 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.193547010 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.193919897 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.193938971 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.194327116 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.194333076 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.287199020 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.287303925 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.287355900 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.287503004 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.287518978 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.287528992 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.287533998 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.290272951 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.290323973 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.290469885 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.290649891 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.290662050 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.302184105 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.302249908 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.302299976 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.302386045 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.302402020 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.302414894 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.302421093 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.304424047 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.304455042 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.304610014 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.304760933 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.304773092 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.321844101 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.322191954 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.322221041 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.322571039 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.322576046 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.387144089 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.410537958 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.411048889 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.411079884 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.411417007 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.411423922 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.429316044 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.429476976 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.429547071 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.429635048 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.429653883 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.429663897 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.429668903 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.432239056 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.432266951 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.432410955 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.432558060 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.432566881 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.433783054 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.437892914 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.437920094 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.437937021 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.437959909 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.437983990 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.438004017 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.438007116 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.438023090 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.438038111 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.438051939 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.438055038 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.438138008 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.480654001 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.480686903 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.480731010 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.480736971 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.480762959 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.480777025 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.480792046 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.480817080 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.482996941 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.483040094 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.483071089 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.483077049 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.483122110 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.483144999 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.483150005 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.521622896 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.521728039 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.521781921 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.521920919 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.521920919 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.521928072 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.521934986 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.524394989 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.524488926 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.524586916 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.524723053 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.524743080 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.529325962 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.548042059 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.548403978 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.548424006 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.548784971 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.548789978 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.572751045 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.572784901 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.572830915 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.572979927 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.572979927 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.573007107 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.573086977 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.573657036 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.573703051 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.573728085 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.573735952 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.573767900 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.573779106 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.575515985 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.575557947 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.575589895 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.575596094 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.575627089 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.575645924 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.614268064 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.614336014 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.614356995 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.614387035 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.614414930 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.614434004 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.655921936 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.656092882 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.656502008 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.661115885 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.661132097 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.661145926 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.661153078 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.664022923 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.664041042 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.664108038 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.664380074 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.664393902 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.664917946 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.664988041 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.665023088 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.665029049 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.665057898 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.665070057 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.665344000 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.665393114 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.665407896 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.665414095 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.665452957 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.665539026 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.665592909 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.711291075 CEST	49842	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.711308956 CEST	443	49842	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.820863962 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.820905924 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.821008921 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.822705030 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.822721958 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.855367899 CEST	49856	443	192.168.2.6	52.105.40.53
Oct 7, 2024 11:38:48.855431080 CEST	443	49856	52.105.40.53	192.168.2.6
Oct 7, 2024 11:38:48.855490923 CEST	49856	443	192.168.2.6	52.105.40.53
Oct 7, 2024 11:38:48.855710983 CEST	49856	443	192.168.2.6	52.105.40.53
Oct 7, 2024 11:38:48.855726004 CEST	443	49856	52.105.40.53	192.168.2.6
Oct 7, 2024 11:38:48.958899975 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.975404978 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.975440979 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.975790977 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.975795031 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.991027117 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.991038084 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.991101027 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.991183996 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.991436958 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:48.991457939 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:48.992238998 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.992326975 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:48.992594957 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:48.992611885 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.077692986 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.077862978 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.078528881 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.079586029 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.079605103 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.079615116 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.079621077 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.083332062 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.083354950 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.083483934 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.083622932 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.083626986 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.099191904 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.099498987 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.099517107 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.100064039 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.100069046 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.106821060 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.106884956 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.107054949 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.107631922 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.107633114 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.107683897 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.107714891 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.111021042 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.111071110 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.111201048 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.111382961 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.111418009 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.189763069 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.202655077 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.202744961 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.203342915 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.203357935 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.211431980 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.211589098 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.211874008 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.211999893 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.212018967 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.212028980 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.212034941 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.215030909 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.215069056 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.215195894 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.215455055 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.215472937 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.306042910 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.306138039 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.306349039 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.312273979 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.312273979 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.312320948 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.312349081 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.318681955 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.318720102 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.318790913 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.319111109 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.319119930 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.324855089 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.327847004 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.327892065 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.328455925 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.328464031 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.436984062 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.437088966 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.437212944 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.639720917 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:49.647583008 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:49.647603035 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:49.648473978 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:49.648538113 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:49.649152994 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:49.649210930 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:49.660636902 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.660675049 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.660888910 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.660897970 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.663320065 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.663381100 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.663450003 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.663582087 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.663592100 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.690501928 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:49.690527916 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:49.731570005 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:49.746809959 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.748301029 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.748322964 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.750199080 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.750202894 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.762638092 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.763071060 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.763154984 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.763542891 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.763556957 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.769821882 CEST	443	49856	52.105.40.53	192.168.2.6
Oct 7, 2024 11:38:49.770068884 CEST	49856	443	192.168.2.6	52.105.40.53
Oct 7, 2024 11:38:49.770088911 CEST	443	49856	52.105.40.53	192.168.2.6
Oct 7, 2024 11:38:49.770979881 CEST	443	49856	52.105.40.53	192.168.2.6
Oct 7, 2024 11:38:49.771048069 CEST	49856	443	192.168.2.6	52.105.40.53
Oct 7, 2024 11:38:49.771960020 CEST	49856	443	192.168.2.6	52.105.40.53
Oct 7, 2024 11:38:49.772015095 CEST	443	49856	52.105.40.53	192.168.2.6
Oct 7, 2024 11:38:49.787367105 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:49.787560940 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:49.787581921 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:49.789007902 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:49.789077997 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:49.789431095 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:49.789499998 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:49.789549112 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:49.789556026 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:49.825529099 CEST	49856	443	192.168.2.6	52.105.40.53
Oct 7, 2024 11:38:49.825545073 CEST	443	49856	52.105.40.53	192.168.2.6
Oct 7, 2024 11:38:49.837274075 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:49.853070021 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.853135109 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.853241920 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.853353977 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.853414059 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.853414059 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.853430986 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.853437901 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.855875969 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.855910063 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.855977058 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.856100082 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.856108904 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.868937969 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.869348049 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.869368076 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.869788885 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.869793892 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.871299982 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.871465921 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.871551991 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.871556997 CEST	49856	443	192.168.2.6	52.105.40.53
Oct 7, 2024 11:38:49.871639967 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.871639967 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.871685982 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.871720076 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.874325037 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.874361038 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.874428988 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.874555111 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.874568939 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.975203037 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.975266933 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.975328922 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.975363016 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.975414038 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.975466967 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.978293896 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:49.978328943 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:49.978383064 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:49.979502916 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:49.979520082 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:49.981415987 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.981430054 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.981463909 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.981471062 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.986486912 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.986510992 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.986599922 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.986841917 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.986855030 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.988317966 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.988718987 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.988730907 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:49.989237070 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:49.989243031 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.020611048 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.020658970 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.020730972 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.021188021 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.021275043 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.021302938 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.021320105 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.021352053 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.021559000 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.021595955 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.049648046 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.054419041 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.054430008 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.054449081 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.054482937 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.054491997 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.054522991 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.054548979 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.054553986 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.054591894 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.100629091 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.100706100 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.100760937 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.100959063 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.100975037 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.100991964 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.101000071 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.103720903 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.103816986 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.103893042 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.104043007 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.104074001 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.136002064 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.136025906 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.136082888 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.136094093 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.136132002 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.137763023 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.137782097 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.137846947 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.137852907 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.137888908 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.222301960 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.222325087 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.222374916 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.222383022 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.222424984 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.223134041 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.223151922 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.223195076 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.223198891 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.223223925 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.223237038 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.224879026 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.224900007 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.224953890 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.224960089 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.224999905 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.225892067 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.225909948 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.225963116 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.225967884 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.226013899 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.308825016 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.308847904 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.308908939 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.308917999 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.308929920 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.308955908 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.308973074 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.308979988 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.309020042 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.309025049 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.309102058 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.309145927 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.309273005 CEST	49857	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:50.309287071 CEST	443	49857	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:50.343646049 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.344366074 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.344403028 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.344749928 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.344757080 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.398067951 CEST	49871	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:50.398144007 CEST	443	49871	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:50.398235083 CEST	49871	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:50.398747921 CEST	49871	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:50.398783922 CEST	443	49871	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:50.458486080 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.458560944 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.458627939 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.458846092 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.458872080 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.458889008 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.458895922 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.461692095 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.461718082 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.461791992 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.461966038 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.461983919 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.509130955 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.509686947 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.509779930 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.510097980 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.510112047 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.524203062 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.524621964 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.524648905 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.524996042 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.525001049 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.619796038 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.619857073 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.619951963 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.620096922 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.620098114 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.620150089 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.620186090 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.623765945 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.623791933 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.623857975 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.623995066 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.624001026 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.639887094 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.640122890 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.640168905 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.640170097 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.640217066 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.640288115 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.640307903 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.640322924 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.640330076 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.642611980 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.642633915 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.642708063 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.642828941 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.642849922 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.662307978 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.662574053 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.662606955 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.664284945 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.664355040 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.665465117 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.665553093 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.665636063 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.665646076 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.672116995 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.672348022 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.672414064 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.675977945 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.676055908 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.676526070 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.676619053 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.676693916 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.676713943 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.679433107 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.679893970 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.679917097 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.680363894 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.680368900 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.680766106 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.680943966 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.680957079 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.681848049 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.681910992 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.682287931 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.682343960 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.682399035 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.682408094 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.717814922 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.717943907 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.733335018 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.771732092 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.771797895 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.771816969 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.771836996 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.771852016 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.771878004 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.771898985 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.771899939 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.771931887 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.771933079 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.771948099 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.771991968 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.775331020 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.775787115 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.775841951 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.776057959 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.776122093 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.776141882 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.776181936 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.776225090 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.776297092 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.776297092 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.776297092 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.776297092 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.776376963 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.776398897 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.776412010 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.776441097 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.788362026 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.788378954 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.788395882 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.788408995 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.788434982 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.788444996 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.788496971 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.788501978 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.788501978 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.788543940 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.789971113 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.790009022 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.791914940 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.792052984 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.792103052 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.792195082 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.792210102 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.792220116 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.792226076 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.797625065 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.797653913 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.797709942 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.797934055 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.797950983 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.802409887 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:50.802464962 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:50.802539110 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:50.802715063 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:50.802742004 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:50.860563993 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.860701084 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.860732079 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.860760927 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.860860109 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.861094952 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.861110926 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.861145020 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.861175060 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.863302946 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.863356113 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.863430977 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.863512039 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.863562107 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.864722967 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.864980936 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.865025043 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.865070105 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.865087032 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.865128994 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.865219116 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.886652946 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.886728048 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.886976004 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.886976957 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.887070894 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.887098074 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.889682055 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.889781952 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.889923096 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.890125036 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:50.890163898 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:50.951817989 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.951885939 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.952052116 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.952052116 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.952120066 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.952358007 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.952827930 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.952872992 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.952924013 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.952940941 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.952970982 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.953064919 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.953901052 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.953949928 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.953998089 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.954011917 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.954046965 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.954849005 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.954900980 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.954955101 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.954971075 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:50.955008984 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:50.955303907 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.040616035 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.040853024 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.041026115 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.041136980 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.041933060 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.041975021 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.055741072 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.055800915 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.057231903 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.057477951 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.057493925 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.083430052 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.083470106 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.086425066 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.086565018 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.086582899 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.100348949 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.100389004 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.100567102 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.100828886 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.100851059 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.153541088 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.153954983 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.153975010 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.154752016 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.154756069 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.183305025 CEST	443	49871	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:51.183845997 CEST	49871	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:51.188200951 CEST	49871	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:51.188261986 CEST	443	49871	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:51.188595057 CEST	443	49871	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:51.190138102 CEST	49871	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:51.190274000 CEST	49871	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:51.190274000 CEST	49871	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:51.190289974 CEST	443	49871	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:51.231403112 CEST	443	49871	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:51.266575098 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.266659975 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.266872883 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.266872883 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.266872883 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.269457102 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.269503117 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.269670963 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.269746065 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.269753933 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.530373096 CEST	443	49871	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:51.530452967 CEST	443	49871	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:51.530991077 CEST	49871	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:51.530992031 CEST	49871	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:51.530992031 CEST	49871	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:38:51.531096935 CEST	443	49871	40.115.3.253	192.168.2.6
Oct 7, 2024 11:38:51.532059908 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.532426119 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.532804012 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.532841921 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.532876968 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.532896042 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.533353090 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.533360004 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.533840895 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.533845901 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.534313917 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.534718990 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.534766912 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.536312103 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.536389112 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.536710978 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.536802053 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.536854982 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.537477970 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.538162947 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.538162947 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.538188934 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.538203001 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.577866077 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.577872038 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.577888966 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.577898026 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.627423048 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.635848045 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.635871887 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.635883093 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.635910988 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.635925055 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.635937929 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.635956049 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.635977983 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.636008024 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.636008024 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.636015892 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.636045933 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.637155056 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.637170076 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.637206078 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.641002893 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.641089916 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.641257048 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.641475916 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.641493082 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.641530037 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.641536951 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.643620968 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.643665075 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.643806934 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.645803928 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.645864964 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.645874977 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.645885944 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.645997047 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.646119118 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.646787882 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.646794081 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.646827936 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.646833897 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.650245905 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.650296926 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.650346994 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.650420904 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.650461912 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.650608063 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.650645018 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.650702953 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.651106119 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.651134968 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.652276993 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.652299881 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.652335882 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.652343035 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.654444933 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.654472113 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.654535055 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.654900074 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.654912949 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.719240904 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.726989031 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.733302116 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.736077070 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.763339043 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.764023066 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.764034033 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.764206886 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.764219046 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.764220953 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.764252901 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.765063047 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.765063047 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.765150070 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.765182018 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.765631914 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.765645981 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.765738964 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.766076088 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.766158104 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.766226053 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.766249895 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.766390085 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.766606092 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.766606092 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.766619921 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.766690016 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.767848969 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.768043995 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.768234968 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.768235922 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.768264055 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.768425941 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.807410002 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.810230970 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.810231924 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.810237885 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.810244083 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.810245991 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.810251951 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.857093096 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.857333899 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.857343912 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.864593029 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.864619017 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.864628077 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.864669085 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.864701986 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.864708900 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.864722967 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.864748955 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.864754915 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.864761114 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.864764929 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.864779949 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.864799976 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.864845037 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.865462065 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.865511894 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.865521908 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.865534067 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.865544081 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.865554094 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.865561008 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.865562916 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.865585089 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.865611076 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.865641117 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.866545916 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.866612911 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.866635084 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.866682053 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.866703033 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.866725922 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.866750002 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.866781950 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.866782904 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.866782904 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.866812944 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.866880894 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.866880894 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.868705988 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.868825912 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.868911028 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.869241953 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.869283915 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.869311094 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.869326115 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.876584053 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.876626968 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.876682043 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.876905918 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.876918077 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.879125118 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.879148960 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.884963989 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.885049105 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.885142088 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.885349035 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.885386944 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.951801062 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.951817036 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.951841116 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.951868057 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.951936007 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.951960087 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.951972008 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.952337980 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.952372074 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.952425957 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.952438116 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.952452898 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.952475071 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.952559948 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.953512907 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.953537941 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.953584909 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.953591108 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:51.953603983 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.953629971 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:51.953847885 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.953898907 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.953927994 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.953943014 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:51.953974962 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.953999996 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:51.955185890 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.955204010 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:51.955857038 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:51.955862999 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.409567118 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:52.409603119 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:52.409709930 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:52.409710884 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:52.409781933 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:52.409856081 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:52.409857988 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:52.409884930 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.409894943 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.409918070 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:52.409929037 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.409931898 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:52.409953117 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.409970045 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.409974098 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:52.409986019 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.410011053 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:52.410017014 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.410036087 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:52.410047054 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:52.410074949 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:52.410115004 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:52.410141945 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:52.410141945 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:52.410170078 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:52.410195112 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:52.410214901 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:52.410619020 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.410640001 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.410686970 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.410692930 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.410722971 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.410733938 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.410773039 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:52.410799026 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.410819054 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.410856009 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.410861015 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.410912991 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:52.410919905 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.410978079 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.410979033 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:52.413079977 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.413100958 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.413167953 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.413187981 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.413212061 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.413216114 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.413266897 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.413274050 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.413300991 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.413316011 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.413342953 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.417779922 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:52.417814970 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:52.424737930 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.424787998 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.424817085 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.467423916 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.511692047 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.513847113 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.513907909 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.513972044 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.514014006 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.514029980 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.514036894 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.516906023 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.516946077 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.517065048 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.517178059 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.517187119 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.596215963 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.596453905 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.596491098 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.597002029 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.597327948 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.597438097 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.597467899 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.601305008 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.601742983 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.601759911 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.602144003 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.602149010 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.606323957 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.608134031 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.608144045 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.608163118 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.608172894 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.608182907 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.608203888 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.608217955 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.608242035 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.608262062 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.608268023 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.608519077 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.609116077 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.609638929 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.609678030 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.610129118 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.610140085 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.613507032 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.613795996 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.613814116 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.614135027 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.614139080 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.617379904 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.617665052 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.617688894 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.617989063 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.617994070 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.637702942 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.637712002 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.696175098 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.696201086 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.696300030 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.696300030 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.696310043 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.696376085 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.697288036 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.697309017 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.697354078 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.697360992 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.697408915 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.697408915 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.697990894 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.698034048 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.698044062 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.698091030 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.698120117 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.698156118 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.698167086 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.698194981 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.698196888 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.698254108 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.698707104 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:52.698723078 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:52.711353064 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.711441994 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.711493969 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.711637020 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.711656094 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.711669922 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.711677074 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.714790106 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.714816093 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.715002060 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.715152979 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.715167999 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.720415115 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.720927954 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.720999002 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.721024990 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.721060038 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.721106052 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.721148014 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.721148014 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.721179008 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.721199989 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.723040104 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.723068953 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.723129034 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.723267078 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.723273993 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.728023052 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.728168011 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.728230000 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.728285074 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.728296041 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.728303909 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.728310108 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.730268955 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.730279922 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.730333090 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.730460882 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.730469942 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.732494116 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.733208895 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.733310938 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.733526945 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.733526945 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.733537912 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.733558893 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.736221075 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.736236095 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.736316919 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.736473083 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:52.736489058 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:52.782092094 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.782119989 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.782182932 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.782192945 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.782237053 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.782237053 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.783080101 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.783099890 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.783180952 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.783180952 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.783190966 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.783283949 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.784537077 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.784555912 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.784638882 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.784638882 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.784648895 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.784775972 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.869595051 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.869617939 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.869733095 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.869733095 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.869743109 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.869793892 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.869920015 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.869940996 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.870012999 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.870012999 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.870022058 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.870148897 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.870840073 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.870857954 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.870934963 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.870935917 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.870944023 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.871057034 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.872452021 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.872469902 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.872534037 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.872541904 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.872561932 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.872826099 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.873343945 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.873368979 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.873451948 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.873461008 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.873502970 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.873502970 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.874320030 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.874340057 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.874429941 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.874429941 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.874439001 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.874558926 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.956971884 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.956999063 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.957094908 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.957094908 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.957104921 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.957323074 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.957365036 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.957385063 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.957453966 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.957454920 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.957473993 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.957532883 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.957557917 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.957598925 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.957607031 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.957685947 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.957700968 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.958204985 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.958225965 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.958268881 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.958281994 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.958528996 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.958554029 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.961837053 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.961857080 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.961899996 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.961906910 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.961935043 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.962064028 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.962244987 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.962265015 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.962341070 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.962341070 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.962347984 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.962496996 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.962651014 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.962677002 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.962743044 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.962743044 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:52.962759972 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:52.962841988 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.044521093 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.044547081 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.044605017 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.044634104 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.044634104 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.044639111 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.044656038 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.044667006 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.044686079 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.044836044 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.044862032 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.044931889 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.044931889 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.044943094 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.045094013 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.045116901 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.045166969 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.045166969 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.045175076 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.045195103 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.045212984 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.045274973 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.045274973 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.045286894 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.045696020 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.045723915 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.045780897 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.045780897 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.045788050 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.045800924 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.045861959 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.045861959 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.053102970 CEST	49855	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.053117037 CEST	443	49855	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.172236919 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.220568895 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.307725906 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.358578920 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.376701117 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.383570910 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.383579969 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.384637117 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.384641886 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.385440111 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.385462046 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.386542082 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.386547089 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.392476082 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.392482042 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.393377066 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.393379927 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.394093990 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.394499063 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.394514084 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.395020962 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.395025015 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.397392988 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.398992062 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.399000883 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.400202990 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.400208950 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.402358055 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:53.402390957 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:53.402457952 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:53.403637886 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:53.403738022 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:53.403815031 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:53.407195091 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:53.407217026 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:53.407305002 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:53.409662962 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:53.409672976 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:53.410490036 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:53.410531044 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:53.410974979 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:53.411000967 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:53.484431028 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.484692097 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.484766006 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.489041090 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.489409924 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.489552021 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.495831013 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.495992899 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.496099949 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.496731043 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.496742964 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.496762037 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.496784925 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.503993988 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.503993988 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.504014969 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.504023075 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.504784107 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.505260944 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.505306005 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.507018089 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.507024050 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.509337902 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.509510994 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.509566069 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.509646893 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.509769917 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.509780884 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.509789944 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.509793997 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.555208921 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.555217028 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.555232048 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.555237055 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.583939075 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:53.584032059 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:53.584270000 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:53.584666014 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:53.584702969 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:53.597829103 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.597924948 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.598026991 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.600696087 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.600717068 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.600950003 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.601533890 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.601569891 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.602001905 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.602041006 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.602094889 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.602298975 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.602314949 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.603519917 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.603548050 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.603614092 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.603950977 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.603980064 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.604794979 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.604806900 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.606421947 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.606465101 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.606527090 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.606976032 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:53.606993914 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:53.633060932 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.633080006 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:53.633145094 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.634262085 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:53.634279013 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.052550077 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.053508997 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.053546906 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.054994106 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.055079937 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.055310011 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.055414915 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.055425882 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.061933041 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.062194109 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.062208891 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.063291073 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.063651085 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.063822031 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.064080000 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.084494114 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.084705114 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.084717035 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.084973097 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.085264921 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.085318089 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.085396051 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.099406004 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.101558924 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.101592064 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.107481956 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.131400108 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.147344112 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.153873920 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.154251099 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.154316902 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.154721975 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.154766083 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.165097952 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.165199041 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.165282965 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.165292978 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.165333986 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.165425062 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.190773964 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.190849066 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.190896988 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.224601030 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.263814926 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.272439957 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.276015043 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.284024954 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.284888029 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.292882919 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.304320097 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.319746971 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.324439049 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.324779034 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.340348005 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.459321976 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.513699055 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.615200996 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.615259886 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.617080927 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.617105961 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.617152929 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.617170095 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.617180109 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.617888927 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.621795893 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.621902943 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.622421980 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.622539043 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.622668028 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.622684956 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.622786045 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.629286051 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.629306078 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.630148888 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.630152941 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.630718946 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.630763054 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.631309032 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.631314039 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.631608009 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.631701946 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.632273912 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.632287025 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.633315086 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.633368015 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.634592056 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.634608984 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.635468960 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.635498047 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.636523008 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.636534929 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.647526026 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.647541046 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.657798052 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.657844067 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.663438082 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.667583942 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.673661947 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:54.673690081 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:54.673758984 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:54.674138069 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:54.674151897 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:54.676316023 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:54.676373005 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:54.676450968 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:54.676714897 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:54.676753998 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:54.678297997 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:54.678322077 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:54.678395033 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:54.678946972 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:54.678956985 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:54.720879078 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.720910072 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.720920086 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.720938921 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.720947981 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.720957041 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.721002102 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.721040010 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.721069098 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.721092939 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.733705044 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.733786106 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.733897924 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.733918905 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.733990908 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.737382889 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.737698078 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.737746954 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.741775990 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.741926908 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.742095947 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.743045092 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.743143082 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.743238926 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.743318081 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.743499041 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.743552923 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.743565083 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.743670940 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.795001984 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.795001984 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.795051098 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.795078039 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.796925068 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.796967030 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.796983957 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.796992064 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.799483061 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.799483061 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.799518108 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.799566031 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.805011988 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.805038929 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.805051088 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.805057049 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.805924892 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.807109118 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.807143927 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.807188034 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.807200909 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.807270050 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.807301044 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.807306051 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.807306051 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.807342052 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.807362080 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.807598114 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.807621956 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.807663918 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.807665110 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.807687998 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.807702065 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.807720900 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.807734013 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.807759047 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.807770967 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.808037996 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.808052063 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.808096886 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.808113098 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.812386990 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.812441111 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.812527895 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.817419052 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:38:54.817439079 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 7, 2024 11:38:54.889403105 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.889442921 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.893937111 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.893997908 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.894108057 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.895405054 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.895442009 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.895497084 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.895519018 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.895525932 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.895565987 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.895669937 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.895703077 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.896684885 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.896692038 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.896851063 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.897296906 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.897308111 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.897453070 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.897526979 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.897550106 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.897559881 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.897600889 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.898644924 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.898658991 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.898997068 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:54.899008989 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:54.899378061 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.899462938 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.899483919 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.899490118 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.899532080 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.899548054 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.903655052 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:54.903697014 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:54.903829098 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:54.905122995 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:54.905142069 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:54.952236891 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.987559080 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.987593889 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.987633944 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.987643003 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.987673044 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.987683058 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.987701893 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.987726927 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.988531113 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.988581896 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.988626003 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.988632917 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.988662004 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.988672972 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.989692926 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.989746094 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.989801884 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.989809990 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.989839077 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.989850998 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.992078066 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.992120028 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.992165089 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.992172003 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:54.992203951 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:54.992204905 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.078259945 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.078327894 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.078345060 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.078352928 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.078387976 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.078397036 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.078481913 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.078528881 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.078541994 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.078560114 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.078584909 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.078603029 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.078838110 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.078881025 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.078902006 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.078907967 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.078932047 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.078949928 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.079262018 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.079313993 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.079338074 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.079344034 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.079374075 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.079386950 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.082813978 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.082854986 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.082890034 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.082895994 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.082926035 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.082933903 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.083199024 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.083245039 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.083266020 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.083271980 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.083300114 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.083309889 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.083718061 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.083764076 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.083790064 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.083795071 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.083822012 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.083844900 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.168955088 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169015884 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169054985 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.169063091 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169101000 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.169110060 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.169116020 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169146061 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169176102 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.169195890 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.169199944 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169224977 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169261932 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.169277906 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.169384003 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169538975 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169578075 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169605017 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.169611931 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169641972 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.169796944 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169843912 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169856071 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.169871092 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.169905901 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.169996023 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.170036077 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.170047998 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.170062065 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.170097113 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.170305967 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.170356989 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.170371056 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.170382023 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.170418024 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.170500040 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.170536995 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.170555115 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.170562983 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.170591116 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.170608997 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.202807903 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.259568930 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.259641886 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.259659052 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.259675980 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.259710073 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.259718895 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.259782076 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.259825945 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.259846926 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.259852886 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.259881973 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.259891033 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.259943008 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.260075092 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.260119915 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.260130882 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.260154009 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.260186911 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.260258913 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.260315895 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.260324001 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.260355949 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.260384083 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.260499001 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.260550022 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.261204958 CEST	49902	443	192.168.2.6	152.199.21.175
Oct 7, 2024 11:38:55.261217117 CEST	443	49902	152.199.21.175	192.168.2.6
Oct 7, 2024 11:38:55.321614981 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.321933985 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.321989059 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.322293043 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.323999882 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.324089050 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.326317072 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.326524973 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.326951981 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.326961994 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.328434944 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.328533888 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.329391956 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.329467058 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.329802990 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.329807997 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.352056026 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.352983952 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.352993965 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.354100943 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.354935884 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.355153084 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.355386972 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.367405891 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.372544050 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.399437904 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.424746037 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.425144911 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.425211906 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.425952911 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.425976038 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.427670956 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.428195000 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.428256035 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.428288937 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.428344965 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.429106951 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.429122925 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.457494020 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.457659006 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.457726002 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.458136082 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.458143950 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.545264959 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.550884962 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.553493977 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.577769995 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.578401089 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.578465939 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.578902960 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.578917027 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.579142094 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.579159975 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.579941034 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.579946041 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.580221891 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.580239058 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.580759048 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.580763102 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.580995083 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.581001997 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.581423998 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.581516027 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.581520081 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.581753016 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.581779003 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.581780910 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.582041979 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.582103968 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.582640886 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.582653999 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.585331917 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.585438013 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.585772991 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.585948944 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.586107969 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.586117029 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.638282061 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.680313110 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.680874109 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.680932999 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.681070089 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.681087971 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.681101084 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.681108952 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.682337999 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.682430029 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.682673931 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.682715893 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.682734013 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.682775974 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.682919979 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.682929039 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.682939053 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.682943106 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.683031082 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.683196068 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.683864117 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.683876991 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.683887005 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.683891058 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.685633898 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.685674906 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.686976910 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.686989069 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.687010050 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.687721014 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.687864065 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.687880993 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.688162088 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.688174009 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.689057112 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.689064980 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.689167976 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.689280987 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.689291000 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.694823980 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.695033073 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.695101023 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.695162058 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.695171118 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.695204973 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.695298910 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.695303917 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.695313931 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.695326090 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.695329905 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.695353985 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.695944071 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.695944071 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.695981979 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.696006060 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.698462009 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.698472977 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.698550940 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.699177980 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.699193954 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.700355053 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.700453043 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.700550079 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.700741053 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:55.700778961 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:55.713375092 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.713393927 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.713402033 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.713423014 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.713432074 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.713438988 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.713455915 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.713469028 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.713495016 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.713543892 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.803375006 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.803406000 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.803440094 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.803478003 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.803551912 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.803594112 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.803697109 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.804102898 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.804166079 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.804387093 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:55.804402113 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 11:38:55.804436922 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:38:56.339553118 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.351747036 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.352051973 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.361896992 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.361912966 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.362339973 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.362344980 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.362983942 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.363053083 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.363183975 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.363200903 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.363360882 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.363406897 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.363637924 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.363650084 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.369942904 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.372729063 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.372747898 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.388817072 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.388840914 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.463340044 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.463402033 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.463571072 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.465035915 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.465550900 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.465747118 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.467071056 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.467104912 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.467158079 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.467185974 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.467226028 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.493846893 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.493869066 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.493907928 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.493973970 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.494004965 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.532860041 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.532893896 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.532933950 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.532942057 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.535377026 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.535382032 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.535397053 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.535398960 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.567724943 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.567763090 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.567823887 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.568164110 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.568164110 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.568240881 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.568279982 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.568885088 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.568922043 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.568969011 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.568984032 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.601953983 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.601974010 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.605441093 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.605462074 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.605803013 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.610532999 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.610629082 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.610829115 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.612449884 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.612482071 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.612543106 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.612679958 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.612685919 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.613492966 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.613524914 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:56.613739014 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:56.613749981 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.255526066 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.259206057 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.259222031 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.260723114 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.260726929 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.278378963 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.279458046 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.279473066 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.280524969 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.280529022 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.291209936 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.291353941 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.293983936 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.293992996 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.294873953 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.294878006 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.296469927 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.296536922 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.297102928 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.297120094 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.367305040 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.367441893 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.367485046 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.390703917 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.390783072 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.390837908 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.390850067 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.390906096 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.390954018 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.402935028 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.403228045 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.403271914 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.403275013 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.403321981 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.404177904 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.404532909 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.404711008 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.436471939 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.436495066 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.438437939 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.438438892 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.438515902 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.438559055 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.447088957 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.447108984 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.447119951 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.447127104 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.448546886 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.448546886 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.448563099 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.448570967 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.451338053 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.451373100 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.451426029 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.453319073 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.453325987 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.453376055 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.453377008 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.453401089 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.453455925 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.453680038 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.453695059 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.463548899 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.463577986 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.464631081 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.464667082 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.464729071 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.464838028 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.464845896 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:57.464943886 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:57.464955091 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.105501890 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.110730886 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.110816002 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.111116886 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.111131907 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.126686096 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.127125025 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.127145052 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.127511024 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.127516031 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.128134966 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.129740000 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.129765987 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.130197048 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.130203009 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.151885986 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.152188063 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.152221918 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.152599096 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.152610064 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.230561018 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.230638981 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.230707884 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.231028080 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.231028080 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.231066942 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.231091022 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.235573053 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.235644102 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.235733032 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.235752106 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.235769987 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.235882044 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.236339092 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.236354113 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.236402988 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.236416101 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.237015963 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.237075090 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.237243891 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.237318993 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.237344027 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.237462997 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.237473011 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.237526894 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.237663984 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.237663984 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.237684965 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.237696886 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.238620996 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.238631964 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.238696098 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.238804102 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.238821030 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.239274979 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.239306927 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.239432096 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.239687920 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.239696980 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.268305063 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.268378973 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.268455029 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.268687010 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.268706083 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.268728971 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.268743038 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.271260023 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.271348953 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.271434069 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.271553040 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.271581888 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.889446020 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.889930964 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.889966011 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.890393972 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.890402079 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.899051905 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.899419069 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.899427891 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.899832010 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.899835110 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.920495033 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.921020031 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.921039104 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.921358109 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.921364069 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.926434040 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.926753998 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.926785946 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:58.927103043 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:58.927110910 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.001600981 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.001627922 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.001672029 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.001694918 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.001741886 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.001949072 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.001949072 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.001969099 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.001991987 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.004416943 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.004477024 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.004611015 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.004762888 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.004771948 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.006055117 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.006207943 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.006437063 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.006464958 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.006475925 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.006486893 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.006491899 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.008168936 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.008178949 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.008339882 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.008470058 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.008483887 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.038758039 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.038842916 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.038904905 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.039108038 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.039123058 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.039150000 CEST	49928	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.039156914 CEST	443	49928	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.041784048 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.041806936 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.041874886 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.042046070 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.042062998 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.098897934 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.098953962 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.099020958 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.099178076 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.099195004 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.099222898 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.099230051 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.101694107 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.101725101 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.101784945 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.101893902 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.101897955 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.553030014 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.553503990 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.553524971 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.553941965 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.553946018 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.659369946 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.660043955 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.660077095 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.660509109 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.660515070 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.664007902 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.664680004 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.664736986 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.664758921 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.664776087 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.664783001 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.664789915 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.667193890 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.667233944 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.667306900 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.667455912 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.667460918 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.667985916 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.668323040 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.668330908 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.668653965 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.668658972 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.723467112 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.724046946 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.724104881 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.724420071 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.724432945 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.750494003 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.750869989 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.750890017 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.751234055 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.751239061 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.776479006 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.776622057 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.776721001 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.776793957 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.776813030 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.776825905 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.776833057 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.777810097 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.778301954 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.778358936 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.778388977 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.778395891 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.778402090 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.778405905 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.779870033 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.779907942 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.780041933 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.780145884 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.780150890 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.781219959 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.781258106 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.783634901 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.783634901 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.783669949 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.840017080 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.840254068 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.840317011 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.840502977 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.840502977 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.840542078 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.840568066 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.843260050 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.843357086 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.843456984 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.843592882 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.843620062 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.859262943 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.859379053 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.859460115 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.859518051 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.859518051 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.859533072 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.859540939 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.861335039 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.861371040 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 7, 2024 11:38:59.861558914 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.861679077 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:38:59.861694098 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.362396955 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.362845898 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.362869978 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.363238096 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.363240957 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.433187008 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.433698893 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.433710098 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.434052944 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.434056997 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.444844007 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.445310116 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.445324898 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.445718050 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.445723057 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.478254080 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.478319883 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.478477001 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.478516102 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.478529930 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.478538990 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.478543997 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.480967999 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.481000900 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.481096983 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.481219053 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.481224060 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.528994083 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.529412031 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.529419899 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.529936075 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.529938936 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.533972025 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.534378052 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.534445047 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.534625053 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.534641981 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.551503897 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.551522970 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.551559925 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.551583052 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.551619053 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.551819086 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.551831007 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.551865101 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.551868916 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.553605080 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.553916931 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.553982973 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.554014921 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.554028988 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.554064035 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.554069042 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.554492950 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.554586887 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.554671049 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.554799080 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.554819107 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.555825949 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.555912971 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.555989027 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.556116104 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.556142092 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.640197039 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.641303062 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.641371965 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.641453028 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.641470909 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.641482115 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.641486883 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.644165993 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.644208908 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.644275904 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.644399881 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.644409895 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.648797035 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.648988008 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.649163961 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.649163961 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.649163961 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.651263952 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.651274920 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.651350021 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.651480913 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.651492119 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:00.950464010 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:00.950534105 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.144023895 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.144462109 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.144475937 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.144818068 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.144821882 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.215648890 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.216162920 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.216228008 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.216519117 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.216532946 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.233814001 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.234304905 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.234370947 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.234498978 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.234514952 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.253657103 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.253676891 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.253726959 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.253736019 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.253946066 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.253952026 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.253962994 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.254092932 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.254117966 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.254162073 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.256402016 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.256458998 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.256550074 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.256694078 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.256706953 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.314152002 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.314342022 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.314760923 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.314796925 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.315377951 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.315395117 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.316436052 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.316448927 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.316890955 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.316895008 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.323337078 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.323432922 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.323488951 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.323503971 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.323549986 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.323599100 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.323723078 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.323734999 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.323744059 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.323748112 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.327986956 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.328016043 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.328085899 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.328229904 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.328238010 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.349904060 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.350070000 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.350179911 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.350254059 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.350254059 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.350254059 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.350255013 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.353101015 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.353125095 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.353344917 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.353476048 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.353482962 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.422629118 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.422873974 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.422940969 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.423180103 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.423197031 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.423207998 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.423213005 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.423871994 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.423898935 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.423939943 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.424000025 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.424987078 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.424987078 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.425060987 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.425065041 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.430267096 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.430290937 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.431406975 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.431412935 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.431435108 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.431621075 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.431868076 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.431880951 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.432137012 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.432145119 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.654856920 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.654930115 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.929202080 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.929713964 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.929733992 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.930296898 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.930300951 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.935116053 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.935754061 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.935767889 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.936556101 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.936559916 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.979454994 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.979918003 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.979933023 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:01.980535030 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:01.980540037 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.040513039 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.040580988 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.040769100 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.042087078 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.042118073 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.042191029 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.042248011 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.042421103 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.049952030 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.050003052 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.051621914 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.051642895 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.051656008 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.051661015 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.060554028 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.060666084 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.060792923 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.062515020 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.062547922 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.063317060 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.063441038 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.063519001 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.063796997 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.063834906 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.090651035 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.090713024 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.090771914 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.090787888 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.090841055 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.090924978 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.091162920 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.091178894 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.091192007 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.091197014 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.096704006 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.096755981 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.096856117 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.097398043 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.097428083 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.114767075 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.115772009 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.115808964 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.117690086 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.117695093 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.130247116 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.131294966 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.131309032 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.132030010 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.132038116 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.220148087 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.220887899 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.221003056 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.221035004 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.221046925 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.221057892 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.221061945 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.223504066 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.223545074 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.223615885 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.223802090 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.223814964 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.242242098 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.242269039 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.242307901 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.242316961 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.242328882 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.242362976 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.242497921 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.242510080 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.242518902 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.242523909 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.244291067 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.244302034 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.244457006 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.244581938 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.244590998 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.751519918 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.752154112 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.752224922 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.752548933 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.752574921 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.758752108 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.759355068 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.759418964 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.759980917 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.759996891 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.764662981 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.765372992 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.765389919 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.766247034 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.766258001 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.868007898 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.868390083 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.868463039 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.868536949 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.868566036 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.868623018 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.868745089 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.868786097 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.868818045 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.868830919 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.868833065 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.868900061 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.870754957 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.870794058 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.877810001 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.877866983 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.877931118 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.879043102 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.879071951 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.879199982 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.879237890 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.879261017 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.879425049 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.879447937 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.879873037 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.880091906 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.880172014 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.880290985 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.880311012 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.880335093 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.880347013 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.884114027 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.884170055 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.884287119 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.884685993 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.884706020 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.886476994 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.887072086 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.887099981 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.888608932 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.888622046 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.938556910 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.939057112 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.939071894 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:02.939598083 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:02.939601898 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.232290983 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.232319117 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.232363939 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.232373953 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.232419014 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.232536077 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.232691050 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.232748985 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.232871056 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.232889891 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.232903004 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.232909918 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.233019114 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.233022928 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.233046055 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.233050108 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.239360094 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.239396095 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.239650965 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.240643978 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.240654945 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.242202044 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.242233038 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.242348909 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.242518902 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.242535114 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.547821999 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.548444033 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.548464060 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.548870087 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.548876047 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.548907995 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.549305916 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.549371958 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.549694061 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.549707890 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.553858042 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.554147005 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.554178953 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.554471016 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.554481030 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.654809952 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.654920101 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.654999971 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.655114889 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.655131102 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.655143023 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.655149937 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.657742023 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.657784939 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.657845974 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.658020973 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.658035994 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.658382893 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.658649921 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.658689976 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.658703089 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.658736944 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.658776999 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.658795118 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.658806086 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.658811092 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.660648108 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.660682917 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.660744905 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.660845995 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.660856962 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.663784981 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.665585995 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.665653944 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.665719986 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.665724993 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.665731907 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.665735006 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.667488098 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.667567968 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.667644024 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.667776108 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.667812109 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.894597054 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.895426989 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.895437956 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.896445990 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.896450996 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.904405117 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.905508995 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.905525923 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:03.906337976 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:03.906342030 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.203555107 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.203615904 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.203700066 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.204020023 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.204202890 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.204463005 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.206800938 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.206815004 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.206823111 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.206829071 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.208190918 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.208203077 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.267963886 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.268019915 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.268089056 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.270936966 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.270956039 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.271967888 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.271976948 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.272070885 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.272217989 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.272227049 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.398277044 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.399147987 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.403026104 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.403043032 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.406630993 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.406639099 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.407119036 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.407145023 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.407602072 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.407706976 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.407711029 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.443581104 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.443618059 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.444725037 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.444729090 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.509212017 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.509322882 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.509396076 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.509435892 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.509473085 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.509548903 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.510121107 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.510184050 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.510198116 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.510205984 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.510211945 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.510288000 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.510334969 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.514422894 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.514439106 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.520468950 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.520522118 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.520637035 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.522202015 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.522300959 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.522380114 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.522715092 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.522730112 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.523063898 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.523107052 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.558511972 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.558875084 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.558938980 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.559067011 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.559077978 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.563165903 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.563191891 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.563245058 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.563466072 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.563477039 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.940201998 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.940710068 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.940726042 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.941114902 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.941119909 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.950510979 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.950890064 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.950897932 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:04.951251030 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:04.951255083 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.046534061 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.047013044 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.047080994 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.047373056 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.047389984 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.047406912 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.047411919 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.050734043 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.050769091 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.050915003 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.051156044 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.051167965 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.062381029 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.062405109 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.062438965 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.062449932 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.062485933 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.062668085 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.062673092 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.062680960 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.062684059 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.066548109 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.066647053 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.066730022 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.066965103 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.067003012 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.183636904 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.214627028 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.219441891 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.219535112 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.220073938 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.220089912 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.220442057 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.220462084 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.220840931 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.220845938 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.233903885 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.234358072 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.234369040 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.234704018 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.234709024 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.321073055 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.321149111 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.321285963 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.321341991 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.321341991 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.321517944 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.321567059 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.321599960 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.321615934 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.325381041 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.325459957 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.325489998 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.325536966 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.325547934 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.325598955 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.325949907 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.325963020 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.325972080 CEST	49963	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.325982094 CEST	443	49963	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.326841116 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.326855898 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.328928947 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.328963995 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.329137087 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.329374075 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.329384089 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.341964960 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.342118979 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.342179060 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.342329979 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.342343092 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.342351913 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.342355967 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.343792915 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.343803883 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.343936920 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.344120026 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.344132900 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.702886105 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.710278034 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.710290909 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.710760117 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.710767031 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.731071949 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.731700897 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.731792927 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.732090950 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.732108116 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.811887026 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.812074900 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.812151909 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.812227011 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.812262058 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.816880941 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.816907883 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.819986105 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.820023060 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.820079088 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.820394993 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.820409060 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.838478088 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.839008093 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.839219093 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.852389097 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.852389097 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.852461100 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.852498055 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.855484009 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.855571032 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.855678082 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.855792046 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.855830908 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.989804983 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.990396976 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.990432978 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.990837097 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.990843058 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.997414112 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.998480082 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.998500109 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:05.998910904 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:05.998914957 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.017836094 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.025913000 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.025922060 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.055008888 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.055016994 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.097451925 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.097507000 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.097557068 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.097568989 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.097651005 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.097701073 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.098481894 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.098498106 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.098553896 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.098561049 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.102719069 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.102787971 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.102866888 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.103174925 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.103197098 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.111025095 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.111085892 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.111197948 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.111207008 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.111524105 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.111524105 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.111535072 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.111892939 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.111987114 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.112143040 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.113636017 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.113688946 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.113754034 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.113903046 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.113930941 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.158811092 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.159303904 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.159460068 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.159598112 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.163471937 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.163471937 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.163494110 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.163503885 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.166460991 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.166546106 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.166637897 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.166765928 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.166785955 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.473850965 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.474328995 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.474349976 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.474734068 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.474740982 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.550529957 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.550990105 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.551018953 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.551407099 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.551413059 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.581258059 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.581350088 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.581418037 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.581722975 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.581742048 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.581751108 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.581756115 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.584542036 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.584590912 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.584783077 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.584927082 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.584939003 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.664273024 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.664378881 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.664434910 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.664455891 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.664541960 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.664664984 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.664664984 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.664710045 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.664740086 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.667118073 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.667216063 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.667300940 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.667457104 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.667478085 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.757765055 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.758266926 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.758327961 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.758660078 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.758672953 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.781478882 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.781862974 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.781888962 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.782236099 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.782247066 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.868707895 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.868882895 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.868969917 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.869024992 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.869024992 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.869062901 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.869086027 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.871584892 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.871682882 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.871864080 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.872009993 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.872041941 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.891566992 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.891719103 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.891777992 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.891797066 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.891844034 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.891900063 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.891989946 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.891989946 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.892007113 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.892026901 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.895126104 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.895159006 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:06.895344019 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.895576000 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:06.895589113 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.281315088 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.282010078 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.282036066 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.282531023 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.282542944 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.319730997 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.320244074 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.320310116 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.320837975 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.320853949 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.394687891 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.394881010 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.394994974 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.395374060 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.436873913 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.437133074 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.437342882 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.444127083 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.444154024 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.444165945 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.444171906 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.445228100 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.445274115 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.445363045 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.445379972 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.449050903 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.449099064 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.449280977 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.450293064 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.450345039 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.450433016 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.450448036 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.450459003 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.450577021 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.450597048 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.527597904 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.541100979 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.541194916 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.544379950 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.544395924 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.556466103 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.593534946 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.593558073 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.594185114 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.594189882 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.645308018 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.645391941 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.645518064 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.645678997 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.646841049 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.646868944 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.646884918 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.646892071 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.649871111 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.649920940 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.650090933 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.650216103 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.650233030 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.696885109 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.697040081 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.697144985 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.697204113 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.697221994 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.697232962 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.697238922 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.699594021 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.699639082 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.699704885 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.699826002 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.699839115 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.891866922 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.892358065 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.892436981 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.892824888 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:07.892838955 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.999684095 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.999762058 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:07.999856949 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.000185966 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.000185966 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.000225067 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.000251055 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.014703989 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.014754057 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.014844894 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.015028000 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.015042067 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.015141010 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.015428066 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.015484095 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.015630007 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.015646935 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.015664101 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.015782118 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.015793085 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.015911102 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.015945911 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.016645908 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.016685009 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.016824961 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.017013073 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.017025948 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.105823040 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.106831074 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.106869936 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.107439041 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.107445002 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.143613100 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.144239902 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.144260883 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.144722939 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.144727945 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.212668896 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.212840080 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.212905884 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.213077068 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.213093042 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.213103056 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.213109016 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.215773106 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.215791941 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.215863943 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.216034889 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.216049910 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.256951094 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.256980896 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.257020950 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.257039070 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.257091045 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.257329941 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.257349968 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.257364988 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.257371902 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.259891987 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.259911060 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.260003090 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.260145903 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.260163069 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.338093996 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.338694096 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.338742971 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.338994980 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.339004993 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.369107008 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.369698048 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.369735003 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.369961023 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.369966984 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.463170052 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.463380098 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.463476896 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.463516951 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.463532925 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.463545084 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.463551044 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.465863943 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.465905905 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.466175079 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.466294050 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.466305971 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.480974913 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.481213093 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.481352091 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.481375933 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.481385946 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.481394053 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.481396914 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.485717058 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.485759020 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.485943079 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.486358881 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.486380100 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.650095940 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.650515079 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.650549889 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.650911093 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.651504040 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.651561975 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.651638985 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.654237986 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.657048941 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.657058954 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.657592058 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.661762953 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.661866903 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.661884069 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.679454088 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.679672956 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.679725885 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.681197882 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.681278944 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.681627035 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.681718111 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.681802034 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.681819916 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.695506096 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.700508118 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.701445103 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.701464891 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.702050924 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.702050924 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.702064991 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.702176094 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.702179909 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.732352018 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.758924961 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.758966923 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.759027958 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.759038925 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.759227037 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.759284019 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.759819984 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.759840965 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.759885073 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.759892941 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.759944916 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.759944916 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.759962082 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.759991884 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.760032892 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.760032892 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.762758017 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.762764931 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.768896103 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:08.768939972 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:08.768999100 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:08.769473076 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:08.769495010 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:08.769938946 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:08.769948959 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:08.770036936 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:08.770299911 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:08.770314932 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:08.782711983 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.782741070 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.782797098 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.782821894 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.782900095 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.782936096 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.783004999 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.783099890 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.783967972 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:08.783998966 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:08.787132978 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:08.787164927 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:08.787249088 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:08.787430048 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:08.787440062 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:08.812098980 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.812122107 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.812164068 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.812170029 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.812218904 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.812864065 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.812875986 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.812889099 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.812892914 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.816054106 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.816107035 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.816179037 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.816315889 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.816349983 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.895850897 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.896349907 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.896379948 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.896800995 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.896809101 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.957853079 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.958322048 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.958348989 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:08.958731890 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:08.958739042 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.009875059 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.010335922 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.010390997 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.010412931 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.010443926 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.010454893 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.010463953 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.012856007 CEST	49997	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.012906075 CEST	443	49997	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.012979031 CEST	49997	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.013139963 CEST	49997	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.013154030 CEST	443	49997	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.039386034 CEST	49998	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:09.039474010 CEST	443	49998	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:09.039586067 CEST	49998	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:09.039823055 CEST	49999	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:09.039861917 CEST	443	49999	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:09.040046930 CEST	49999	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:09.040345907 CEST	49999	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:09.040358067 CEST	443	49999	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:09.040558100 CEST	49998	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:09.040600061 CEST	443	49998	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:09.073724985 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.073807001 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.073849916 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.073895931 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.073930025 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.074045897 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.074058056 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.074069977 CEST	49990	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.074074984 CEST	443	49990	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.078855038 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.078875065 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.078931093 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.079094887 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.079112053 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.143698931 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.144615889 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.144615889 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.144634962 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.144651890 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.146126986 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.146472931 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.146493912 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.146816015 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.146821022 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.253349066 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.253516912 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.253667116 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.253772020 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.253772020 CEST	49992	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.253782988 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.253788948 CEST	443	49992	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.256429911 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.256474972 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.256639957 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.256701946 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.256717920 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.258368969 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.258514881 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.258568048 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.258634090 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.258634090 CEST	49991	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.258642912 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.258651018 CEST	443	49991	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.260371923 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.260387897 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.260498047 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.260627031 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.260637045 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.737838984 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.738607883 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.738639116 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.738951921 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.739248991 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.739254951 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.739593983 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.739618063 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.739866018 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.739916086 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.740171909 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.740189075 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.740326881 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.740334988 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.740705967 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.740827084 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.741049051 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.741091013 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.741116047 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.741173029 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.741656065 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.741756916 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.742167950 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.742245913 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.742515087 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.742558956 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.742597103 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.742604971 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.783401966 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.783423901 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.794208050 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.842828035 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.842853069 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.842953920 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.842976093 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.843043089 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.843070030 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.843075037 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.843137026 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.843142033 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.843162060 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.843553066 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.843607903 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.848642111 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.848685980 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.848731041 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.848771095 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.848805904 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.853003025 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.853040934 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.853106022 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.853116035 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.853130102 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.853180885 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.892245054 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.892245054 CEST	49996	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.892285109 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.892307997 CEST	443	49996	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.897205114 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.897222042 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.899739981 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.899784088 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.901262045 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:09.901268005 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:09.905108929 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.905136108 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.905194044 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.905535936 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.905554056 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.924140930 CEST	443	49997	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.925935030 CEST	443	49999	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:09.926907063 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.931849957 CEST	443	49998	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:09.933556080 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.939954996 CEST	49998	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:09.940018892 CEST	443	49998	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:09.940145969 CEST	49999	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:09.940166950 CEST	443	49999	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:09.940691948 CEST	443	49998	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:09.940970898 CEST	443	49999	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:09.943433046 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.943623066 CEST	49999	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:09.943734884 CEST	443	49999	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:09.946723938 CEST	49998	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:09.946845055 CEST	443	49998	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:09.946846962 CEST	49999	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:09.949776888 CEST	49998	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:09.956183910 CEST	49997	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.956260920 CEST	443	49997	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.959403992 CEST	49997	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.959417105 CEST	443	49997	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.962522984 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.962543964 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.968779087 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.968784094 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.969011068 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.969029903 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.974911928 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.974917889 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.975230932 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.975275993 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.981251955 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:09.981259108 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:09.987415075 CEST	443	49999	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:09.991420031 CEST	443	49998	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:10.045567989 CEST	443	49999	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:10.045757055 CEST	443	49999	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:10.051467896 CEST	49999	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:10.059760094 CEST	443	49997	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.059828997 CEST	443	49997	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.059895039 CEST	49997	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.061681032 CEST	443	49998	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:10.061767101 CEST	443	49998	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:10.061837912 CEST	49998	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:10.067883015 CEST	49997	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.067883015 CEST	49997	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.067922115 CEST	443	49997	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.067945957 CEST	443	49997	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.069680929 CEST	49999	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:10.069704056 CEST	443	49999	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:10.071975946 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.072002888 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.072012901 CEST	49998	443	192.168.2.6	13.107.246.45
Oct 7, 2024 11:39:10.072041035 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.072058916 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.072060108 CEST	443	49998	13.107.246.45	192.168.2.6
Oct 7, 2024 11:39:10.072097063 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.074147940 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.074147940 CEST	50001	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.074160099 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.074167013 CEST	443	50001	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.076601028 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.076647997 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.076716900 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.076811075 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.076905966 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.077142000 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.078375101 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.078414917 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.078474998 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.078567028 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.078567028 CEST	50000	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.078577995 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.078578949 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.078588963 CEST	443	50000	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.078593016 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.078648090 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.078680992 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.081276894 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.081300974 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.081368923 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.082215071 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.082226992 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.084038019 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.084218979 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.084275961 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.084777117 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.084784031 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.084790945 CEST	50002	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.084795952 CEST	443	50002	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.086951971 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.086972952 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.087043047 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.087140083 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.087152958 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.092746973 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.092762947 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.092844963 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.093255043 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.093271017 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.093394041 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.093924999 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.093945980 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.094224930 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.094239950 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.586977005 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.587457895 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.587500095 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.587819099 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.587826014 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.699223042 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.699256897 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.699312925 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.699342012 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.699376106 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.699517965 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.699517965 CEST	50003	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.699537992 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.699549913 CEST	443	50003	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.702594995 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.702680111 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.702781916 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.702963114 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.702999115 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.730782032 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.731230021 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.731251955 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.731745005 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.732422113 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.732503891 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.732594013 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.747956991 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.748399973 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.748418093 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.748811007 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.748816013 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.749032974 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.749255896 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.749326944 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.749411106 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.749542952 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.749651909 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.749672890 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.749707937 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.749718904 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.749878883 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.749897957 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.750157118 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.750161886 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.750257969 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.750586987 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.750694990 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.750710011 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.769849062 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.770225048 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.770309925 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.770601988 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.770618916 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.775475979 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.794894934 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.794955969 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.832828045 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.832909107 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.833053112 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.833724976 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.833745003 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.853307009 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.853384018 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.853683949 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.854209900 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 7, 2024 11:39:10.854252100 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 7, 2024 11:39:10.856213093 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.856363058 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.856410980 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.856640100 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.856653929 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.856666088 CEST	50006	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.856673002 CEST	443	50006	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.861677885 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.861747980 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.861794949 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.861823082 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.861850977 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.861900091 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.862154961 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.862240076 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.862310886 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.862457991 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.862457991 CEST	50007	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.862478971 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.862500906 CEST	443	50007	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.863356113 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.863404036 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.864051104 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.864130974 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.864197969 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.864340067 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.864351034 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.864362955 CEST	50005	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.864367962 CEST	443	50005	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.865806103 CEST	50012	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.865838051 CEST	443	50012	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.865899086 CEST	50012	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.866899967 CEST	50012	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.866914988 CEST	443	50012	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.867115021 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.867142916 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.868136883 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.868136883 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.868170977 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.882472038 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.882602930 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.882728100 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.882761955 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.882761955 CEST	50004	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.882777929 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.882797956 CEST	443	50004	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.884901047 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.884907961 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:10.885128021 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.885257959 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:10.885271072 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.385847092 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.386734009 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.386734009 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.386784077 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.386826992 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.411302090 CEST	50015	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:11.411345005 CEST	443	50015	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:11.411509991 CEST	50015	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:11.412070990 CEST	50015	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:11.412091017 CEST	443	50015	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:11.505745888 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.505919933 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.506072998 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.506073952 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.507744074 CEST	50010	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.507776022 CEST	443	50010	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.508393049 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.508430958 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.508667946 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.508667946 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.508697033 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.516235113 CEST	443	50012	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.516937017 CEST	50012	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.516937971 CEST	50012	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.516946077 CEST	443	50012	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.516954899 CEST	443	50012	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.524189949 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.524806023 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.524806023 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.524817944 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.524832964 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.532171965 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.532767057 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.532767057 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.532852888 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.532891989 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.571275949 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.571743011 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.571753979 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.572062969 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.572067976 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.625947952 CEST	443	50012	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.625997066 CEST	443	50012	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.626188040 CEST	50012	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.626188040 CEST	50012	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.626324892 CEST	50012	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.626337051 CEST	443	50012	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.628470898 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.628495932 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.628635883 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.628665924 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.628670931 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.631289005 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.631537914 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.631648064 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.631716967 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.631730080 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.631730080 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.631829023 CEST	50013	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.631835938 CEST	443	50013	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.633594990 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.633604050 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.633791924 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.633791924 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.633810997 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.641791105 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.641861916 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.641962051 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.642008066 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.642060995 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.642060995 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.642139912 CEST	50011	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.642173052 CEST	443	50011	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.643631935 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.643649101 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.643846989 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.643846989 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.643876076 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.683562994 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.683732986 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.683866024 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.683866024 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.683898926 CEST	50014	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.683904886 CEST	443	50014	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.686373949 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.686434984 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:11.686657906 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.686657906 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:11.686721087 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.167438030 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.167896986 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.167922020 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.168354034 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.168358088 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.195606947 CEST	443	50015	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:12.195679903 CEST	50015	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:12.197159052 CEST	50015	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:12.197168112 CEST	443	50015	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:12.197401047 CEST	443	50015	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:12.199645042 CEST	50015	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:12.199697971 CEST	50015	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:12.199703932 CEST	443	50015	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:12.199973106 CEST	50015	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:12.243489027 CEST	443	50015	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:12.259100914 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.262393951 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.262418985 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.262903929 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.262911081 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.274753094 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.274904966 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.275304079 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.275470018 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.275487900 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.275497913 CEST	50016	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.275502920 CEST	443	50016	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.277734995 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.277827978 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.277997017 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.278074026 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.278095961 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.292398930 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.293564081 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.293576002 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.294312000 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.294317961 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.317243099 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.338592052 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.353081942 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.353113890 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.353812933 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.353817940 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.354413986 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.354429960 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.354774952 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.354779005 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.367280006 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.367412090 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.367468119 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.367573977 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.367589951 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.367605925 CEST	50020	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.367613077 CEST	443	50020	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.370259047 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.370318890 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.370398045 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.370520115 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.370553017 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.374885082 CEST	443	50015	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:12.375227928 CEST	50015	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:12.375247955 CEST	443	50015	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:12.375260115 CEST	50015	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:12.375322104 CEST	443	50015	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:12.375375032 CEST	50015	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:12.399297953 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.399378061 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.399518967 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.399573088 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.399573088 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.400568008 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.400578022 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.400635004 CEST	50018	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.400639057 CEST	443	50018	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.436868906 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.436917067 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.437094927 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.443320036 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.443336964 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.460681915 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.460747004 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.460819960 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.462794065 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.462956905 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.463016033 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.463226080 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.463243008 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.463253975 CEST	50017	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.463259935 CEST	443	50017	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.466444016 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.466454983 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.466486931 CEST	50019	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.466491938 CEST	443	50019	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.495121002 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.495157957 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.495279074 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.496328115 CEST	50025	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.496370077 CEST	443	50025	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.496444941 CEST	50025	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.496735096 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.496752977 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.497034073 CEST	50025	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.497047901 CEST	443	50025	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.962979078 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.963465929 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.963527918 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:12.963946104 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:12.963960886 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.024912119 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.025403976 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.025465012 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.025799990 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.025815010 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.073040962 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.073210955 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.073280096 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.073390961 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.073390961 CEST	50021	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.073430061 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.073456049 CEST	443	50021	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.076221943 CEST	50026	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.076253891 CEST	443	50026	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.076323986 CEST	50026	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.076476097 CEST	50026	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.076487064 CEST	443	50026	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.116868973 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.117433071 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.117511988 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.117844105 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.117856979 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.134572029 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.134706974 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.134782076 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.134861946 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.134907961 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.134942055 CEST	50022	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.134957075 CEST	443	50022	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.137486935 CEST	50027	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.137579918 CEST	443	50027	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.137662888 CEST	50027	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.137784958 CEST	50027	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.137811899 CEST	443	50027	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.153597116 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.154124975 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.154212952 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.154597044 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.154613972 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.158396959 CEST	443	50025	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.158698082 CEST	50025	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.158708096 CEST	443	50025	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.159079075 CEST	50025	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.159084082 CEST	443	50025	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.225801945 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.225980043 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.226077080 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.226146936 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.226147890 CEST	50023	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.226181030 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.226205111 CEST	443	50023	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.228614092 CEST	50028	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.228656054 CEST	443	50028	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.228732109 CEST	50028	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.228852987 CEST	50028	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.228864908 CEST	443	50028	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.260560989 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.260618925 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.260823965 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.260885954 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.260885954 CEST	50024	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.260921001 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.260943890 CEST	443	50024	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.263436079 CEST	50029	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.263478994 CEST	443	50029	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.263572931 CEST	50029	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.263714075 CEST	50029	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.263729095 CEST	443	50029	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.269548893 CEST	443	50025	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.269700050 CEST	443	50025	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.269778967 CEST	50025	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.269826889 CEST	50025	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.269826889 CEST	50025	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.269840956 CEST	443	50025	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.269849062 CEST	443	50025	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.271847963 CEST	50030	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.271861076 CEST	443	50030	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.271940947 CEST	50030	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.272034883 CEST	50030	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.272039890 CEST	443	50030	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.729070902 CEST	443	50026	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.729981899 CEST	50026	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.729998112 CEST	443	50026	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.730981112 CEST	50026	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.730986118 CEST	443	50026	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.806488991 CEST	443	50027	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.807236910 CEST	50027	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.807323933 CEST	443	50027	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.807943106 CEST	50027	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.807960033 CEST	443	50027	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.840226889 CEST	443	50026	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.840295076 CEST	443	50026	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.840348005 CEST	443	50026	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.840398073 CEST	50026	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.840398073 CEST	50026	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.840687037 CEST	50026	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.840687037 CEST	50026	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.840702057 CEST	443	50026	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.840709925 CEST	443	50026	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.844305038 CEST	50031	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.844376087 CEST	443	50031	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.847672939 CEST	50031	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.848031044 CEST	50031	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.848050117 CEST	443	50031	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.886117935 CEST	443	50028	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.886643887 CEST	50028	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.886655092 CEST	443	50028	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.887290001 CEST	50028	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.887296915 CEST	443	50028	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.923161983 CEST	443	50027	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.923669100 CEST	443	50027	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.923887968 CEST	50027	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.923887968 CEST	50027	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.923888922 CEST	50027	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.926362991 CEST	443	50029	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.927000999 CEST	443	50030	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.927845955 CEST	50029	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.927881956 CEST	443	50029	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.928447008 CEST	50029	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.928468943 CEST	443	50029	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.928507090 CEST	50032	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.928548098 CEST	443	50032	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.928608894 CEST	50032	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.928853989 CEST	50032	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.928873062 CEST	443	50032	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.929044008 CEST	50030	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.929054976 CEST	443	50030	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.929568052 CEST	50030	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.929574013 CEST	443	50030	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.994836092 CEST	443	50028	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.994870901 CEST	443	50028	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.994926929 CEST	443	50028	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.995069981 CEST	50028	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.995114088 CEST	50028	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.995114088 CEST	50028	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.995136023 CEST	443	50028	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.995150089 CEST	443	50028	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.999310017 CEST	50033	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.999378920 CEST	443	50033	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:13.999782085 CEST	50033	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.999924898 CEST	50033	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:13.999953032 CEST	443	50033	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.035363913 CEST	443	50029	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.035453081 CEST	443	50029	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.035506964 CEST	50029	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.035520077 CEST	443	50030	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.035562992 CEST	443	50030	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.035614967 CEST	50030	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.035626888 CEST	443	50030	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.035664082 CEST	443	50030	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.035686970 CEST	50029	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.035701036 CEST	443	50029	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.035711050 CEST	50029	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.035711050 CEST	50030	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.035717964 CEST	443	50029	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.037019014 CEST	50030	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.037022114 CEST	443	50030	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.040769100 CEST	50034	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.040807962 CEST	443	50034	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.040893078 CEST	50034	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.041241884 CEST	50034	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.041269064 CEST	443	50034	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.042248011 CEST	50035	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.042284012 CEST	443	50035	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.042406082 CEST	50035	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.042535067 CEST	50035	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.042562962 CEST	443	50035	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.232824087 CEST	50027	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.232892036 CEST	443	50027	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.511121035 CEST	443	50031	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.511657953 CEST	50031	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.511689901 CEST	443	50031	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.511989117 CEST	50031	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.511996984 CEST	443	50031	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.591031075 CEST	443	50032	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.591614962 CEST	50032	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.591654062 CEST	443	50032	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.591998100 CEST	50032	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.592005014 CEST	443	50032	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.623011112 CEST	443	50031	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.623181105 CEST	443	50031	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.623344898 CEST	50031	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.623482943 CEST	50031	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.623507023 CEST	443	50031	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.623522997 CEST	50031	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.623531103 CEST	443	50031	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.626044035 CEST	50036	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.626070976 CEST	443	50036	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.626204967 CEST	50036	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.626362085 CEST	50036	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.626370907 CEST	443	50036	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.661761045 CEST	443	50033	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.662214994 CEST	50033	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.662271976 CEST	443	50033	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.662611008 CEST	50033	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.662622929 CEST	443	50033	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.700825930 CEST	443	50032	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.700995922 CEST	443	50032	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.701081038 CEST	50032	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.701190948 CEST	50032	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.701211929 CEST	443	50032	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.701225996 CEST	50032	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.701232910 CEST	443	50032	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.703684092 CEST	50037	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.703732014 CEST	443	50037	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.703814983 CEST	50037	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.703927994 CEST	50037	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.703943968 CEST	443	50037	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.712492943 CEST	443	50034	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.712841988 CEST	50034	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.712876081 CEST	443	50034	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.713218927 CEST	50034	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.713232040 CEST	443	50034	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.745856047 CEST	443	50035	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.746211052 CEST	50035	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.746223927 CEST	443	50035	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.746575117 CEST	50035	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.746582985 CEST	443	50035	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.771457911 CEST	443	50033	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.772023916 CEST	443	50033	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.772094965 CEST	50033	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.772150040 CEST	50033	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.772183895 CEST	443	50033	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.772208929 CEST	50033	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.772224903 CEST	443	50033	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.774348974 CEST	50038	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.774367094 CEST	443	50038	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.774426937 CEST	50038	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.774529934 CEST	50038	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.774537086 CEST	443	50038	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.822473049 CEST	443	50034	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.822499037 CEST	443	50034	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.822535992 CEST	443	50034	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.822560072 CEST	50034	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.822590113 CEST	50034	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.822972059 CEST	50034	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.822993994 CEST	443	50034	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.823015928 CEST	50034	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.823026896 CEST	443	50034	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.825391054 CEST	50039	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.825432062 CEST	443	50039	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.825522900 CEST	50039	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.825675011 CEST	50039	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.825694084 CEST	443	50039	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.860660076 CEST	443	50035	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.860815048 CEST	443	50035	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.860891104 CEST	50035	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.861352921 CEST	50035	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.861397982 CEST	443	50035	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.861428976 CEST	50035	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.861443996 CEST	443	50035	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.867161036 CEST	50040	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.867212057 CEST	443	50040	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:14.867425919 CEST	50040	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.867670059 CEST	50040	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:14.867686033 CEST	443	50040	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.284528971 CEST	443	50036	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.285397053 CEST	50036	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.285427094 CEST	443	50036	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.286519051 CEST	50036	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.286525965 CEST	443	50036	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.358114958 CEST	443	50037	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.387303114 CEST	50037	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.387332916 CEST	443	50037	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.392649889 CEST	443	50036	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.392827034 CEST	443	50036	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.392879963 CEST	50036	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.399554968 CEST	50037	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.399561882 CEST	443	50037	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.407725096 CEST	50036	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.407725096 CEST	50036	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.407757044 CEST	443	50036	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.407773018 CEST	443	50036	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.410857916 CEST	50041	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.410901070 CEST	443	50041	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.410975933 CEST	50041	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.411185980 CEST	50041	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.411197901 CEST	443	50041	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.432862997 CEST	443	50038	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.450901985 CEST	50038	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.450918913 CEST	443	50038	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.459677935 CEST	50038	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.459685087 CEST	443	50038	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.501334906 CEST	443	50037	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.501370907 CEST	443	50037	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.501419067 CEST	50037	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.501430035 CEST	443	50037	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.501723051 CEST	443	50037	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.501768112 CEST	50037	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.502084017 CEST	50037	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.502101898 CEST	443	50037	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.502114058 CEST	50037	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.502121925 CEST	443	50037	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.506388903 CEST	443	50039	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.506676912 CEST	50042	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.506717920 CEST	443	50042	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.506781101 CEST	50042	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.507370949 CEST	50039	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.507405996 CEST	443	50039	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.508057117 CEST	50039	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.508064032 CEST	443	50039	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.508235931 CEST	50042	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.508272886 CEST	443	50042	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.552486897 CEST	443	50040	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.553035975 CEST	50040	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.553065062 CEST	443	50040	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.553900003 CEST	50040	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.553908110 CEST	443	50040	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.562190056 CEST	443	50038	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.562282085 CEST	443	50038	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.562338114 CEST	50038	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.562587976 CEST	50038	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.562603951 CEST	443	50038	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.568139076 CEST	50043	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.568169117 CEST	443	50043	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.568238974 CEST	50043	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.568351030 CEST	50043	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.568361998 CEST	443	50043	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.620340109 CEST	443	50039	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.620364904 CEST	443	50039	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.620421886 CEST	443	50039	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.620430946 CEST	50039	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.620476961 CEST	50039	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.630305052 CEST	50039	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.630328894 CEST	443	50039	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.630347013 CEST	50039	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.630354881 CEST	443	50039	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.634633064 CEST	50044	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.634687901 CEST	443	50044	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.634888887 CEST	50044	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.635159016 CEST	50044	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.635173082 CEST	443	50044	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.666507959 CEST	443	50040	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.666558027 CEST	443	50040	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.666678905 CEST	443	50040	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.666717052 CEST	50040	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.666733027 CEST	50040	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.667152882 CEST	50040	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.667169094 CEST	443	50040	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.667177916 CEST	50040	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.667182922 CEST	443	50040	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.670706987 CEST	50045	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.670748949 CEST	443	50045	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:15.670823097 CEST	50045	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.671005011 CEST	50045	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:15.671022892 CEST	443	50045	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.149456024 CEST	443	50041	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.150110006 CEST	50041	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.150147915 CEST	443	50041	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.150824070 CEST	50041	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.150831938 CEST	443	50041	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.163069010 CEST	443	50042	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.163647890 CEST	50042	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.163660049 CEST	443	50042	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.164670944 CEST	50042	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.164678097 CEST	443	50042	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.224715948 CEST	443	50043	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.225500107 CEST	50043	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.225531101 CEST	443	50043	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.226624012 CEST	50043	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.226627111 CEST	443	50043	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.256656885 CEST	443	50041	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.256671906 CEST	443	50041	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.256728888 CEST	50041	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.256764889 CEST	443	50041	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.257019997 CEST	443	50041	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.257030964 CEST	50041	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.257066965 CEST	443	50041	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.257085085 CEST	50041	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.257085085 CEST	50041	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.257095098 CEST	443	50041	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.257102966 CEST	443	50041	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.260338068 CEST	50046	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.260390043 CEST	443	50046	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.263452053 CEST	50046	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.263597965 CEST	50046	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.263611078 CEST	443	50046	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.270951986 CEST	443	50042	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.271003962 CEST	443	50042	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.271159887 CEST	443	50042	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.271212101 CEST	50042	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.271382093 CEST	50042	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.271388054 CEST	443	50042	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.271413088 CEST	50042	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.271418095 CEST	443	50042	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.274267912 CEST	50047	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.274300098 CEST	443	50047	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.274420977 CEST	50047	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.274605036 CEST	50047	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.274616003 CEST	443	50047	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.281811953 CEST	443	50044	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.282155037 CEST	50044	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.282161951 CEST	443	50044	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.282826900 CEST	50044	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.282831907 CEST	443	50044	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.327786922 CEST	443	50045	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.328531027 CEST	50045	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.328592062 CEST	443	50045	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.329336882 CEST	50045	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.329345942 CEST	443	50045	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.333656073 CEST	443	50043	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.333713055 CEST	443	50043	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.333771944 CEST	50043	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.334114075 CEST	50043	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.334137917 CEST	443	50043	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.334146023 CEST	50043	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.334150076 CEST	443	50043	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.337747097 CEST	50048	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.337800026 CEST	443	50048	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.337867022 CEST	50048	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.338061094 CEST	50048	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.338068008 CEST	443	50048	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.389736891 CEST	443	50044	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.390199900 CEST	443	50044	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.390265942 CEST	50044	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.390619040 CEST	50044	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.390619040 CEST	50044	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.390634060 CEST	443	50044	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.390640974 CEST	443	50044	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.396135092 CEST	50049	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.396183968 CEST	443	50049	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.396241903 CEST	50049	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.397387981 CEST	50049	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.397408009 CEST	443	50049	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.439224958 CEST	443	50045	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.439670086 CEST	443	50045	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.439789057 CEST	50045	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.439831972 CEST	50045	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.439851046 CEST	443	50045	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.442739964 CEST	50050	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.442770004 CEST	443	50050	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:16.443522930 CEST	50050	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.443769932 CEST	50050	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:16.443778992 CEST	443	50050	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.007565975 CEST	443	50046	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.008115053 CEST	50046	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.008181095 CEST	443	50046	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.008678913 CEST	50046	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.008733988 CEST	443	50046	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.008896112 CEST	443	50047	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.009152889 CEST	50047	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.009165049 CEST	443	50047	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.009546995 CEST	50047	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.009551048 CEST	443	50047	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.458106041 CEST	443	50046	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.458172083 CEST	443	50046	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.458246946 CEST	50046	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.464679003 CEST	443	50047	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.464740038 CEST	443	50047	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.464880943 CEST	443	50047	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.464900970 CEST	50047	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.464929104 CEST	50047	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.488575935 CEST	50047	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.488601923 CEST	443	50047	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.488615990 CEST	50047	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.488622904 CEST	443	50047	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.488670111 CEST	50046	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.488670111 CEST	50046	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.488743067 CEST	443	50046	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.488782883 CEST	443	50046	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.492099047 CEST	50051	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.492146969 CEST	443	50051	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.492182970 CEST	50052	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.492209911 CEST	50051	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.492223024 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.492285013 CEST	50052	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.492516994 CEST	50051	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.492520094 CEST	50052	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.492531061 CEST	443	50051	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.492532969 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.534034014 CEST	443	50048	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.534645081 CEST	50048	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.534668922 CEST	443	50048	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.535252094 CEST	50048	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.535255909 CEST	443	50048	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.539271116 CEST	443	50050	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.539666891 CEST	50050	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.539699078 CEST	443	50050	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.540220022 CEST	50050	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.540226936 CEST	443	50050	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.553082943 CEST	443	50049	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.553554058 CEST	50049	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.553575039 CEST	443	50049	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.554121971 CEST	50049	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.554126978 CEST	443	50049	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.643589973 CEST	443	50048	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.643615961 CEST	443	50048	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.643678904 CEST	443	50048	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.643685102 CEST	50048	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.643872023 CEST	50048	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.666029930 CEST	443	50050	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.666088104 CEST	443	50050	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.666161060 CEST	50050	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.666196108 CEST	443	50050	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.666368961 CEST	443	50050	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.666429043 CEST	50050	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.678123951 CEST	443	50049	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.678149939 CEST	443	50049	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.678169966 CEST	443	50049	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.678261995 CEST	50049	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.678280115 CEST	443	50049	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.678319931 CEST	50049	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.678319931 CEST	50049	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.733583927 CEST	50048	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.733613014 CEST	443	50048	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.733625889 CEST	50048	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.733632088 CEST	443	50048	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.735167980 CEST	50050	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.735192060 CEST	443	50050	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.747458935 CEST	50053	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.747549057 CEST	443	50053	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.747622013 CEST	50053	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.748086929 CEST	50053	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.748121023 CEST	443	50053	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.748951912 CEST	50054	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.748971939 CEST	443	50054	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.749032974 CEST	50054	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.749232054 CEST	50054	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.749258041 CEST	443	50054	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.764698982 CEST	443	50049	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.764772892 CEST	50049	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.764777899 CEST	443	50049	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.764823914 CEST	50049	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.768079996 CEST	50049	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.768110991 CEST	443	50049	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.768130064 CEST	50049	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.768137932 CEST	443	50049	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.771061897 CEST	50055	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.771106958 CEST	443	50055	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:17.771161079 CEST	50055	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.771425009 CEST	50055	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:17.771439075 CEST	443	50055	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.145123959 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.157859087 CEST	443	50051	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.164084911 CEST	50052	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.164115906 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.164678097 CEST	50052	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.164685011 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.165075064 CEST	50051	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.165113926 CEST	443	50051	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.165486097 CEST	50051	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.165491104 CEST	443	50051	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.266765118 CEST	443	50051	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.266801119 CEST	443	50051	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.266851902 CEST	50051	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.266875982 CEST	443	50051	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.266917944 CEST	50051	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.266922951 CEST	443	50051	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.266935110 CEST	443	50051	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.267119884 CEST	50051	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.267119884 CEST	50051	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.267139912 CEST	443	50051	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.267162085 CEST	50051	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.267168045 CEST	443	50051	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.269900084 CEST	50057	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.269932985 CEST	443	50057	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.270056963 CEST	50057	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.270260096 CEST	50057	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.270263910 CEST	443	50057	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.274753094 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.274776936 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.274791002 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.274857998 CEST	50052	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.274882078 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.274930000 CEST	50052	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.355851889 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.355901957 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.355945110 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.355947971 CEST	50052	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.355973959 CEST	50052	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.355997086 CEST	50052	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.356174946 CEST	50052	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.356193066 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.356235027 CEST	50052	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.356242895 CEST	443	50052	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.361323118 CEST	50058	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.361344099 CEST	443	50058	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.361465931 CEST	50058	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.361644983 CEST	50058	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.361656904 CEST	443	50058	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.399661064 CEST	443	50054	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.400444984 CEST	50054	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.400485992 CEST	443	50054	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.401160002 CEST	50054	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.401166916 CEST	443	50054	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.416667938 CEST	443	50053	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.417047024 CEST	50053	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.417071104 CEST	443	50053	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.417669058 CEST	50053	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.417673111 CEST	443	50053	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.425775051 CEST	443	50055	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.426517963 CEST	50055	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.426548958 CEST	443	50055	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.427022934 CEST	50055	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.427030087 CEST	443	50055	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.508177996 CEST	443	50054	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.509202957 CEST	443	50054	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.509270906 CEST	50054	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.509391069 CEST	50054	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.509413958 CEST	443	50054	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.509428978 CEST	50054	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.509435892 CEST	443	50054	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.511563063 CEST	50059	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.511660099 CEST	443	50059	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.511743069 CEST	50059	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.511859894 CEST	50059	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.511879921 CEST	443	50059	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.528604031 CEST	443	50053	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.528660059 CEST	443	50053	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.528749943 CEST	50053	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.528769970 CEST	443	50053	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.528832912 CEST	443	50053	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.528875113 CEST	50053	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.528901100 CEST	443	50053	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.528925896 CEST	50053	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.528925896 CEST	50053	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.528942108 CEST	443	50053	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.528960943 CEST	443	50053	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.531954050 CEST	50060	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.531989098 CEST	443	50060	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.532155991 CEST	50060	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.532273054 CEST	50060	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.532284021 CEST	443	50060	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.535324097 CEST	443	50055	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.535403967 CEST	443	50055	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.535464048 CEST	50055	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.535568953 CEST	50055	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.535593033 CEST	443	50055	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.537880898 CEST	50061	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.537916899 CEST	443	50061	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.537977934 CEST	50061	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.538172960 CEST	50061	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.538188934 CEST	443	50061	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.961282015 CEST	443	50057	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.961798906 CEST	50057	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.961815119 CEST	443	50057	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:18.962449074 CEST	50057	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:18.962454081 CEST	443	50057	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.026108980 CEST	443	50058	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.026669025 CEST	50058	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.026690960 CEST	443	50058	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.027404070 CEST	50058	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.027407885 CEST	443	50058	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.074826002 CEST	443	50057	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.075081110 CEST	443	50057	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.075264931 CEST	50057	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.075366974 CEST	50057	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.075366974 CEST	50057	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.075388908 CEST	443	50057	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.075397015 CEST	443	50057	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.079103947 CEST	50062	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.079149008 CEST	443	50062	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.079282999 CEST	50062	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.079500914 CEST	50062	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.079514027 CEST	443	50062	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.137768984 CEST	443	50058	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.137830019 CEST	443	50058	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.138072968 CEST	50058	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.138072968 CEST	50058	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.138072968 CEST	50058	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.140861034 CEST	50063	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.140958071 CEST	443	50063	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.141040087 CEST	50063	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.141170025 CEST	50063	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.141177893 CEST	443	50063	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.165369987 CEST	443	50059	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.166069984 CEST	50059	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.166134119 CEST	443	50059	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.166351080 CEST	50059	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.166368008 CEST	443	50059	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.193624973 CEST	443	50060	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.194199085 CEST	50060	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.194263935 CEST	443	50060	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.194736958 CEST	50060	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.194750071 CEST	443	50060	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.215756893 CEST	443	50061	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.216263056 CEST	50061	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.216296911 CEST	443	50061	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.216701031 CEST	50061	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.216705084 CEST	443	50061	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.275134087 CEST	443	50059	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.275171995 CEST	443	50059	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.275227070 CEST	443	50059	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.275257111 CEST	50059	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.275299072 CEST	50059	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.275583982 CEST	50059	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.275613070 CEST	443	50059	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.275629044 CEST	50059	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.275635958 CEST	443	50059	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.303662062 CEST	443	50060	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.304792881 CEST	443	50060	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.304871082 CEST	50060	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.304902077 CEST	50060	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.304913998 CEST	443	50060	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.304934025 CEST	50060	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.304939032 CEST	443	50060	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.327615976 CEST	443	50061	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.328146935 CEST	443	50061	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.328216076 CEST	50061	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.328282118 CEST	50061	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.328305960 CEST	443	50061	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.328326941 CEST	50061	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.328335047 CEST	443	50061	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.451720953 CEST	50058	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.451761007 CEST	443	50058	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.745443106 CEST	443	50062	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.745992899 CEST	50062	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.746001959 CEST	443	50062	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.746704102 CEST	50062	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.746707916 CEST	443	50062	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.805927038 CEST	443	50063	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.806591034 CEST	50063	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.806618929 CEST	443	50063	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.807102919 CEST	50063	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.807110071 CEST	443	50063	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.855443001 CEST	443	50062	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.855530977 CEST	443	50062	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.855643034 CEST	50062	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.855818033 CEST	50062	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.855838060 CEST	443	50062	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.855848074 CEST	50062	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.855853081 CEST	443	50062	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.918601990 CEST	443	50063	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.918663025 CEST	443	50063	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.918734074 CEST	50063	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.918941975 CEST	50063	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.918961048 CEST	443	50063	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:19.918975115 CEST	50063	443	192.168.2.6	13.107.253.45
Oct 7, 2024 11:39:19.918981075 CEST	443	50063	13.107.253.45	192.168.2.6
Oct 7, 2024 11:39:33.597109079 CEST	50065	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:39:33.597193003 CEST	443	50065	142.250.186.164	192.168.2.6
Oct 7, 2024 11:39:33.597278118 CEST	50065	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:39:33.597574949 CEST	50065	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:39:33.597596884 CEST	443	50065	142.250.186.164	192.168.2.6
Oct 7, 2024 11:39:34.274610996 CEST	443	50065	142.250.186.164	192.168.2.6
Oct 7, 2024 11:39:34.274885893 CEST	50065	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:39:34.274951935 CEST	443	50065	142.250.186.164	192.168.2.6
Oct 7, 2024 11:39:34.275228977 CEST	443	50065	142.250.186.164	192.168.2.6
Oct 7, 2024 11:39:34.275511026 CEST	50065	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:39:34.275578022 CEST	443	50065	142.250.186.164	192.168.2.6
Oct 7, 2024 11:39:34.326246977 CEST	50065	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:39:34.826268911 CEST	49856	443	192.168.2.6	52.105.40.53
Oct 7, 2024 11:39:34.826292992 CEST	443	49856	52.105.40.53	192.168.2.6
Oct 7, 2024 11:39:40.992757082 CEST	50070	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:40.992861032 CEST	443	50070	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:40.993185997 CEST	50070	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:40.994182110 CEST	50070	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:40.994225025 CEST	443	50070	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:41.785743952 CEST	443	50070	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:41.785851002 CEST	50070	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:41.788358927 CEST	50070	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:41.788389921 CEST	443	50070	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:41.788752079 CEST	443	50070	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:41.791533947 CEST	50070	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:41.791696072 CEST	50070	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:41.791708946 CEST	443	50070	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:41.791925907 CEST	50070	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:41.835434914 CEST	443	50070	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:41.966207027 CEST	443	50070	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:41.966371059 CEST	443	50070	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:41.966547012 CEST	50070	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:41.966722012 CEST	50070	443	192.168.2.6	40.115.3.253
Oct 7, 2024 11:39:41.966768980 CEST	443	50070	40.115.3.253	192.168.2.6
Oct 7, 2024 11:39:44.182441950 CEST	443	50065	142.250.186.164	192.168.2.6
Oct 7, 2024 11:39:44.182602882 CEST	443	50065	142.250.186.164	192.168.2.6
Oct 7, 2024 11:39:44.182682037 CEST	50065	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:39:45.467809916 CEST	50065	443	192.168.2.6	142.250.186.164
Oct 7, 2024 11:39:45.467850924 CEST	443	50065	142.250.186.164	192.168.2.6
Oct 7, 2024 11:39:51.468930006 CEST	49856	443	192.168.2.6	52.105.40.53
Oct 7, 2024 11:39:51.469172001 CEST	443	49856	52.105.40.53	192.168.2.6
Oct 7, 2024 11:39:51.469223976 CEST	49856	443	192.168.2.6	52.105.40.53

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 11:38:29.078908920 CEST	53	49822	1.1.1.1	192.168.2.6
Oct 7, 2024 11:38:29.079519987 CEST	53	53307	1.1.1.1	192.168.2.6
Oct 7, 2024 11:38:30.140372992 CEST	53	51082	1.1.1.1	192.168.2.6
Oct 7, 2024 11:38:30.795202017 CEST	49346	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:30.795263052 CEST	60253	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:33.533340931 CEST	53933	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:33.533473015 CEST	60942	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:33.540400982 CEST	53	53933	1.1.1.1	192.168.2.6
Oct 7, 2024 11:38:33.541251898 CEST	53	60942	1.1.1.1	192.168.2.6
Oct 7, 2024 11:38:33.583677053 CEST	51163	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:33.583924055 CEST	57619	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:36.600311041 CEST	54945	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:36.600658894 CEST	52724	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:45.787439108 CEST	50976	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:45.787517071 CEST	63236	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:47.273962021 CEST	49236	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:47.274498940 CEST	52584	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:47.281117916 CEST	53	49236	1.1.1.1	192.168.2.6
Oct 7, 2024 11:38:47.281757116 CEST	53	52584	1.1.1.1	192.168.2.6
Oct 7, 2024 11:38:47.300431013 CEST	53	51237	1.1.1.1	192.168.2.6
Oct 7, 2024 11:38:48.814871073 CEST	52508	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:48.815099955 CEST	60455	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:48.983437061 CEST	52540	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:48.983577013 CEST	52410	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:38:48.990278959 CEST	53	52410	1.1.1.1	192.168.2.6
Oct 7, 2024 11:38:48.990360022 CEST	53	52540	1.1.1.1	192.168.2.6
Oct 7, 2024 11:38:53.415821075 CEST	53	62958	1.1.1.1	192.168.2.6
Oct 7, 2024 11:39:06.552553892 CEST	53	64236	1.1.1.1	192.168.2.6
Oct 7, 2024 11:39:28.976037979 CEST	53	58741	1.1.1.1	192.168.2.6
Oct 7, 2024 11:39:28.976222992 CEST	53	58875	1.1.1.1	192.168.2.6
Oct 7, 2024 11:39:36.608973980 CEST	56936	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:39:36.609064102 CEST	55821	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:39:37.539097071 CEST	55948	53	192.168.2.6	1.1.1.1
Oct 7, 2024 11:39:37.539249897 CEST	51660	53	192.168.2.6	1.1.1.1

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 11:38:30.795202017 CEST	192.168.2.6	1.1.1.1	0x8cf2	Standard query (0)	blsrailno-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:30.795263052 CEST	192.168.2.6	1.1.1.1	0x4b86	Standard query (0)	blsrailno-my.sharepoint.com	65	IN (0x0001)	false
Oct 7, 2024 11:38:33.533340931 CEST	192.168.2.6	1.1.1.1	0x974c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:33.533473015 CEST	192.168.2.6	1.1.1.1	0xf6e0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 11:38:33.583677053 CEST	192.168.2.6	1.1.1.1	0x21	Standard query (0)	blsrailno-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:33.583924055 CEST	192.168.2.6	1.1.1.1	0xd0b7	Standard query (0)	blsrailno-my.sharepoint.com	65	IN (0x0001)	false
Oct 7, 2024 11:38:36.600311041 CEST	192.168.2.6	1.1.1.1	0xf35d	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:36.600658894 CEST	192.168.2.6	1.1.1.1	0xf088	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Oct 7, 2024 11:38:45.787439108 CEST	192.168.2.6	1.1.1.1	0xd0da	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:45.787517071 CEST	192.168.2.6	1.1.1.1	0xe2a8	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 7, 2024 11:38:47.273962021 CEST	192.168.2.6	1.1.1.1	0xcf7c	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:47.274498940 CEST	192.168.2.6	1.1.1.1	0x136a	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 7, 2024 11:38:48.814871073 CEST	192.168.2.6	1.1.1.1	0x7445	Standard query (0)	blsrailno-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:48.815099955 CEST	192.168.2.6	1.1.1.1	0xa4ec	Standard query (0)	blsrailno-my.sharepoint.com	65	IN (0x0001)	false
Oct 7, 2024 11:38:48.983437061 CEST	192.168.2.6	1.1.1.1	0xad68	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:48.983577013 CEST	192.168.2.6	1.1.1.1	0x3a12	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 7, 2024 11:39:36.608973980 CEST	192.168.2.6	1.1.1.1	0x272e	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:39:36.609064102 CEST	192.168.2.6	1.1.1.1	0x716e	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Oct 7, 2024 11:39:37.539097071 CEST	192.168.2.6	1.1.1.1	0xfad	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:39:37.539249897 CEST	192.168.2.6	1.1.1.1	0x2c03	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 11:38:30.836296082 CEST	1.1.1.1	192.168.2.6	0x4b86	No error (0)	blsrailno-my.sharepoint.com	blsrailno.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:30.836296082 CEST	1.1.1.1	192.168.2.6	0x4b86	No error (0)	blsrailno.sharepoint.com	7627-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:30.836296082 CEST	1.1.1.1	192.168.2.6	0x4b86	No error (0)	7627-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189481-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:30.836296082 CEST	1.1.1.1	192.168.2.6	0x4b86	No error (0)	189481-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189481-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:30.855475903 CEST	1.1.1.1	192.168.2.6	0x8cf2	No error (0)	blsrailno-my.sharepoint.com	blsrailno.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:30.855475903 CEST	1.1.1.1	192.168.2.6	0x8cf2	No error (0)	blsrailno.sharepoint.com	7627-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:30.855475903 CEST	1.1.1.1	192.168.2.6	0x8cf2	No error (0)	7627-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189481-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:30.855475903 CEST	1.1.1.1	192.168.2.6	0x8cf2	No error (0)	189481-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189481-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:30.855475903 CEST	1.1.1.1	192.168.2.6	0x8cf2	No error (0)	189481-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:30.855475903 CEST	1.1.1.1	192.168.2.6	0x8cf2	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:30.855475903 CEST	1.1.1.1	192.168.2.6	0x8cf2	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:33.540400982 CEST	1.1.1.1	192.168.2.6	0x974c	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:33.541251898 CEST	1.1.1.1	192.168.2.6	0xf6e0	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 11:38:33.632339954 CEST	1.1.1.1	192.168.2.6	0xd0b7	No error (0)	blsrailno-my.sharepoint.com	blsrailno.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:33.632339954 CEST	1.1.1.1	192.168.2.6	0xd0b7	No error (0)	blsrailno.sharepoint.com	7627-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:33.632339954 CEST	1.1.1.1	192.168.2.6	0xd0b7	No error (0)	7627-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189481-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:33.632339954 CEST	1.1.1.1	192.168.2.6	0xd0b7	No error (0)	189481-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189481-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:33.638695955 CEST	1.1.1.1	192.168.2.6	0x21	No error (0)	blsrailno-my.sharepoint.com	blsrailno.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:33.638695955 CEST	1.1.1.1	192.168.2.6	0x21	No error (0)	blsrailno.sharepoint.com	7627-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:33.638695955 CEST	1.1.1.1	192.168.2.6	0x21	No error (0)	7627-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189481-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:33.638695955 CEST	1.1.1.1	192.168.2.6	0x21	No error (0)	189481-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189481-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:33.638695955 CEST	1.1.1.1	192.168.2.6	0x21	No error (0)	189481-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:33.638695955 CEST	1.1.1.1	192.168.2.6	0x21	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:33.638695955 CEST	1.1.1.1	192.168.2.6	0x21	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:36.607924938 CEST	1.1.1.1	192.168.2.6	0xf088	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:36.608134031 CEST	1.1.1.1	192.168.2.6	0xf35d	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:40.728373051 CEST	1.1.1.1	192.168.2.6	0x3f26	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:40.728373051 CEST	1.1.1.1	192.168.2.6	0x3f26	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:41.737250090 CEST	1.1.1.1	192.168.2.6	0x2381	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:41.737250090 CEST	1.1.1.1	192.168.2.6	0x2381	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:45.794456005 CEST	1.1.1.1	192.168.2.6	0xd0da	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:45.794836998 CEST	1.1.1.1	192.168.2.6	0xe2a8	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:47.281117916 CEST	1.1.1.1	192.168.2.6	0xcf7c	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:47.281117916 CEST	1.1.1.1	192.168.2.6	0xcf7c	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:47.281117916 CEST	1.1.1.1	192.168.2.6	0xcf7c	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:47.281757116 CEST	1.1.1.1	192.168.2.6	0x136a	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:47.281757116 CEST	1.1.1.1	192.168.2.6	0x136a	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.850353003 CEST	1.1.1.1	192.168.2.6	0xa4ec	No error (0)	blsrailno-my.sharepoint.com	blsrailno.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.850353003 CEST	1.1.1.1	192.168.2.6	0xa4ec	No error (0)	blsrailno.sharepoint.com	7627-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.850353003 CEST	1.1.1.1	192.168.2.6	0xa4ec	No error (0)	7627-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189481-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.850353003 CEST	1.1.1.1	192.168.2.6	0xa4ec	No error (0)	189481-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189481-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.854260921 CEST	1.1.1.1	192.168.2.6	0x7445	No error (0)	blsrailno-my.sharepoint.com	blsrailno.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.854260921 CEST	1.1.1.1	192.168.2.6	0x7445	No error (0)	blsrailno.sharepoint.com	7627-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.854260921 CEST	1.1.1.1	192.168.2.6	0x7445	No error (0)	7627-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189481-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.854260921 CEST	1.1.1.1	192.168.2.6	0x7445	No error (0)	189481-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189481-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.854260921 CEST	1.1.1.1	192.168.2.6	0x7445	No error (0)	189481-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	189481-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.854260921 CEST	1.1.1.1	192.168.2.6	0x7445	No error (0)	189481-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com		52.105.40.53	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:48.990278959 CEST	1.1.1.1	192.168.2.6	0x3a12	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.990278959 CEST	1.1.1.1	192.168.2.6	0x3a12	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.990360022 CEST	1.1.1.1	192.168.2.6	0xad68	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.990360022 CEST	1.1.1.1	192.168.2.6	0xad68	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:48.990360022 CEST	1.1.1.1	192.168.2.6	0xad68	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:49.971826077 CEST	1.1.1.1	192.168.2.6	0x6797	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:49.971826077 CEST	1.1.1.1	192.168.2.6	0x6797	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:38:50.801167965 CEST	1.1.1.1	192.168.2.6	0xa2bf	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:38:50.801167965 CEST	1.1.1.1	192.168.2.6	0xa2bf	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:39:02.647563934 CEST	1.1.1.1	192.168.2.6	0x7e77	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:39:02.647563934 CEST	1.1.1.1	192.168.2.6	0x7e77	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:39:21.756995916 CEST	1.1.1.1	192.168.2.6	0xb538	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:39:21.756995916 CEST	1.1.1.1	192.168.2.6	0xb538	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:39:36.616478920 CEST	1.1.1.1	192.168.2.6	0x716e	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:39:36.616657972 CEST	1.1.1.1	192.168.2.6	0x272e	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:39:37.548065901 CEST	1.1.1.1	192.168.2.6	0x2c03	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:39:37.548697948 CEST	1.1.1.1	192.168.2.6	0xfad	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 11:39:41.880691051 CEST	1.1.1.1	192.168.2.6	0x1737	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:39:41.880691051 CEST	1.1.1.1	192.168.2.6	0x1737	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:39:42.165152073 CEST	1.1.1.1	192.168.2.6	0x2c57	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 11:39:42.165152073 CEST	1.1.1.1	192.168.2.6	0x2c57	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

blsrailno-my.sharepoint.com

https:

aadcdn.msftauth.net

aadcdn.msauth.net

otelrules.azureedge.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49713	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:30 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 38 75 59 49 59 70 68 76 4b 55 36 4c 4b 42 66 4e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 33 35 34 36 33 30 33 31 64 62 66 65 61 34 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 8uYIYphvKU6LKBfN.1Context: 835463031dbfea46
2024-10-07 09:38:30 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-07 09:38:30 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 38 75 59 49 59 70 68 76 4b 55 36 4c 4b 42 66 4e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 33 35 34 36 33 30 33 31 64 62 66 65 61 34 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 46 70 63 38 34 47 6f 5a 78 67 48 33 43 38 46 36 53 59 32 4d 4d 4c 45 64 4f 54 32 4a 52 65 79 51 50 50 5a 38 31 41 76 4b 58 6b 61 2f 47 77 6c 63 4b 49 4b 58 56 32 5a 33 59 62 58 43 44 47 64 62 79 7a 43 74 72 74 4e 75 46 4a 46 52 71 4c 66 4b 55 32 43 46 6d 44 4a 6f 58 5a 62 79 45 62 56 42 59 5a 53 55 69 42 6a 33 78 4f 31 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 8uYIYphvKU6LKBfN.2Context: 835463031dbfea46<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAeFpc84GoZxgH3C8F6SY2MMLEdOT2JReyQPPZ81AvKXka/GwlcKIKXV2Z3YbXCDGdbyzCtrtNuFJFRqLfKU2CFmDJoXZbyEbVBYZSUiBj3xO1S
2024-10-07 09:38:30 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 38 75 59 49 59 70 68 76 4b 55 36 4c 4b 42 66 4e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 33 35 34 36 33 30 33 31 64 62 66 65 61 34 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 8uYIYphvKU6LKBfN.3Context: 835463031dbfea46<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-07 09:38:30 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-07 09:38:30 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 42 4f 41 6e 31 4b 58 70 63 45 65 30 64 57 53 6b 62 6b 6e 75 7a 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: BOAn1KXpcEe0dWSkbknuzQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49716	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:31 UTC	768	OUT	GET /:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:32 UTC	1487	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 257467 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,73619,0,28286,92 X-SharePointHealthScore: 3 Referrer-Policy: no-referrer, strict-origin-when-cross-origin SharePointError: 0 X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 518857a1-403e-a000-1242-60a88d46d9c9 request-id: 518857a1-403e-a000-1242-60a88d46d9c9 MS-CV: oVeIUT5AAKASQmCojUbZyQ.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=166e4320-c7ce-4b31-b443-4dfab0fc7b81&destinationEndpoint=Edge-Prod-EWR31r5d&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 386 SPIisLatency: 5 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 96EB4AF60B7046788F25852346CAD959 Ref B: EWR311000107021 Ref C: 2024-10-07T09:38:31Z Date: Mon, 07 Oct 2024 09:38:31 GMT Connection: close
2024-10-07 09:38:32 UTC	854	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0d 0a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint"
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 48 69 64 65 46 6f 72 6d 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 6f 70 61 63 69 74 79 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 2f 2f 20 3c 21 5b 43 44 41 54 41 5b 20 0a 0d 0a 76 61 72 20 5f 69 6e 69 74 47 6c 6f 62 61 6c 53 6e 61 70 53 68 6f 74 20 3d 20 7b 7d 3b 74 72 79 20 7b 20 20 20 20 69 66 20 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 5f 69 6e 69 74 47 6c 6f 62 61 6c 53 6e 61 70 53 68 6f 74 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 20 7b 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 6d 65 6d 62 65 72 49 6e 64 65 78 20 69 6e 20 77 69 6e 64 6f 77 29 20 7b 20 20 20 20 20 20 20 20 20 20 69 66 20 28 42 6f 6f Data Ascii: HideForms" type="text/css">body {opacity:0 !important}</style><script type="text/javascript">// <![CDATA[ var _initGlobalSnapShot = {};try { if (Object.keys(_initGlobalSnapShot).length == 0) { for (var memberIndex in window) { if (Boo
2024-10-07 09:38:32 UTC	5973	IN	Data Raw: 38 46 42 31 36 22 3a 31 2c 22 33 45 46 46 32 37 38 36 2d 33 36 37 36 2d 34 32 36 31 2d 38 43 42 30 2d 39 44 30 44 41 33 45 45 43 45 37 42 22 3a 31 2c 22 36 39 41 38 44 33 44 46 2d 30 36 35 38 2d 34 33 39 41 2d 41 32 38 31 2d 33 31 44 34 43 34 44 43 43 32 32 43 22 3a 31 2c 22 31 42 44 38 45 44 37 43 2d 46 31 37 36 2d 34 32 46 38 2d 42 32 44 42 2d 36 31 38 35 45 36 41 33 33 42 37 37 22 3a 31 2c 22 45 44 45 42 37 38 33 38 2d 37 41 41 43 2d 34 38 32 36 2d 39 44 36 32 2d 30 44 44 34 33 44 31 36 41 30 38 37 22 3a 31 2c 22 34 37 41 32 37 44 44 46 2d 35 33 30 46 2d 34 44 46 35 2d 41 38 39 45 2d 33 41 34 38 46 32 43 37 39 41 43 42 22 3a 31 2c 22 43 34 34 36 34 45 34 38 2d 33 41 34 35 2d 34 42 41 37 2d 39 46 39 42 2d 35 44 35 30 39 37 46 45 32 32 31 44 22 3a 31 2c Data Ascii: 8FB16":1,"3EFF2786-3676-4261-8CB0-9D0DA3EECE7B":1,"69A8D3DF-0658-439A-A281-31D4C4DCC22C":1,"1BD8ED7C-F176-42F8-B2DB-6185E6A33B77":1,"EDEB7838-7AAC-4826-9D62-0DD43D16A087":1,"47A27DDF-530F-4DF5-A89E-3A48F2C79ACB":1,"C4464E48-3A45-4BA7-9F9B-5D5097FE221D":1,
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 2d 39 35 45 46 2d 46 36 33 44 44 38 37 33 34 46 38 34 22 3a 31 2c 22 30 43 37 41 39 37 44 42 2d 36 42 30 43 2d 34 32 34 42 2d 38 45 36 43 2d 41 34 31 38 45 37 33 34 30 37 31 32 22 3a 31 2c 22 32 43 38 41 45 34 43 30 2d 46 33 34 46 2d 34 31 34 38 2d 39 39 46 32 2d 35 33 44 37 33 42 30 45 43 35 38 42 22 3a 31 2c 22 30 46 46 41 43 30 32 45 2d 34 33 46 33 2d 34 42 43 31 2d 42 35 30 38 2d 37 46 38 46 44 43 42 46 46 31 46 38 22 3a 31 2c 22 43 45 35 34 39 36 30 37 2d 31 33 30 37 2d 34 35 42 30 2d 39 44 30 35 2d 36 34 44 37 36 31 31 44 32 36 42 42 22 3a 31 2c 22 38 42 34 35 43 31 38 30 2d 35 35 34 32 2d 34 44 35 33 2d 41 31 30 31 2d 31 38 41 32 32 37 39 35 44 34 45 45 22 3a 31 2c 22 33 36 42 42 34 33 39 33 2d 39 41 33 31 2d 34 31 41 35 2d 41 46 32 43 2d 37 42 36 Data Ascii: -95EF-F63DD8734F84":1,"0C7A97DB-6B0C-424B-8E6C-A418E7340712":1,"2C8AE4C0-F34F-4148-99F2-53D73B0EC58B":1,"0FFAC02E-43F3-4BC1-B508-7F8FDCBFF1F8":1,"CE549607-1307-45B0-9D05-64D7611D26BB":1,"8B45C180-5542-4D53-A101-18A22795D4EE":1,"36BB4393-9A31-41A5-AF2C-7B6
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 33 38 33 2d 34 38 30 34 2d 41 36 43 42 2d 38 36 32 30 42 30 37 38 34 45 36 35 22 3a 31 2c 22 31 30 41 38 37 43 39 36 2d 32 43 30 46 2d 34 39 39 45 2d 39 46 43 44 2d 39 44 39 35 34 34 36 30 36 45 38 39 22 3a 31 2c 22 42 31 31 44 34 38 46 31 2d 42 34 32 33 2d 34 45 44 32 2d 42 34 32 31 2d 32 44 43 41 39 41 37 36 45 41 43 39 22 3a 31 2c 22 46 45 33 39 44 43 30 43 2d 43 44 45 39 2d 34 44 43 33 2d 38 46 39 37 2d 44 32 33 39 45 34 45 45 46 34 46 45 22 3a 31 2c 22 45 41 43 34 33 33 39 43 2d 32 32 45 38 2d 34 45 42 45 2d 41 34 37 44 2d 41 46 34 36 41 37 31 31 32 33 42 33 22 3a 31 2c 22 38 41 34 46 45 33 41 32 2d 46 38 43 42 2d 34 45 46 45 2d 39 46 37 39 2d 30 32 36 46 37 45 31 34 38 42 32 39 22 3a 31 2c 22 39 30 36 32 36 31 35 44 2d 30 31 33 35 2d 34 34 33 37 2d Data Ascii: 383-4804-A6CB-8620B0784E65":1,"10A87C96-2C0F-499E-9FCD-9D9544606E89":1,"B11D48F1-B423-4ED2-B421-2DCA9A76EAC9":1,"FE39DC0C-CDE9-4DC3-8F97-D239E4EEF4FE":1,"EAC4339C-22E8-4EBE-A47D-AF46A71123B3":1,"8A4FE3A2-F8CB-4EFE-9F79-026F7E148B29":1,"9062615D-0135-4437-
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 38 41 37 32 37 32 2d 43 43 37 35 2d 34 44 36 35 2d 42 41 46 41 2d 43 42 34 37 30 41 34 39 43 39 37 42 22 3a 31 2c 22 42 39 44 35 35 45 34 36 2d 43 37 31 37 2d 34 30 34 39 2d 41 38 41 34 2d 44 31 30 41 46 32 31 46 43 38 36 36 22 3a 31 2c 22 42 46 38 43 45 37 34 30 2d 34 30 34 42 2d 34 30 45 42 2d 42 37 41 32 2d 44 36 37 44 31 33 33 32 38 43 30 45 22 3a 31 2c 22 35 43 43 38 32 44 46 38 2d 36 30 43 39 2d 34 39 38 36 2d 39 33 35 43 2d 33 44 46 31 41 33 39 35 38 30 44 32 22 3a 31 2c 22 46 38 38 36 31 46 46 43 2d 38 33 36 31 2d 34 38 30 35 2d 42 38 44 32 2d 38 35 36 31 33 38 42 38 32 44 43 39 22 3a 31 2c 22 45 46 44 36 45 39 34 37 2d 45 36 42 38 2d 34 44 31 31 2d 38 36 36 32 2d 35 39 30 46 41 42 35 42 39 33 31 36 22 3a 31 2c 22 42 33 33 31 36 32 34 30 2d 43 41 Data Ascii: 8A7272-CC75-4D65-BAFA-CB470A49C97B":1,"B9D55E46-C717-4049-A8A4-D10AF21FC866":1,"BF8CE740-404B-40EB-B7A2-D67D13328C0E":1,"5CC82DF8-60C9-4986-935C-3DF1A39580D2":1,"F8861FFC-8361-4805-B8D2-856138B82DC9":1,"EFD6E947-E6B8-4D11-8662-590FAB5B9316":1,"B3316240-CA
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 37 22 3a 31 2c 22 41 42 34 46 37 44 33 41 2d 41 34 41 33 2d 34 31 36 32 2d 39 32 46 41 2d 32 44 41 41 41 45 43 44 36 42 43 46 22 3a 31 2c 22 44 33 35 30 43 46 31 39 2d 41 30 36 43 2d 34 43 35 34 2d 39 36 36 36 2d 32 39 43 46 35 30 42 32 30 38 33 41 22 3a 31 2c 22 43 43 34 44 44 46 30 30 2d 38 32 38 42 2d 34 45 37 33 2d 38 39 42 45 2d 30 46 42 38 32 45 32 46 37 31 31 39 22 3a 31 2c 22 36 33 43 44 42 31 39 30 2d 36 39 39 30 2d 34 32 31 35 2d 39 31 36 34 2d 38 31 41 45 42 31 46 43 37 43 33 31 22 3a 31 2c 22 46 45 35 33 33 45 39 31 2d 38 38 45 38 2d 34 41 30 43 2d 42 36 43 32 2d 30 32 46 33 45 44 45 38 43 42 37 33 22 3a 31 2c 22 42 34 33 39 31 42 46 32 2d 46 39 32 34 2d 34 44 37 33 2d 41 41 35 35 2d 35 39 37 31 35 43 37 31 37 45 33 36 22 3a 31 2c 22 31 43 45 Data Ascii: 7":1,"AB4F7D3A-A4A3-4162-92FA-2DAAAECD6BCF":1,"D350CF19-A06C-4C54-9666-29CF50B2083A":1,"CC4DDF00-828B-4E73-89BE-0FB82E2F7119":1,"63CDB190-6990-4215-9164-81AEB1FC7C31":1,"FE533E91-88E8-4A0C-B6C2-02F3EDE8CB73":1,"B4391BF2-F924-4D73-AA55-59715C717E36":1,"1CE
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 46 32 39 35 33 46 39 42 31 22 3a 31 2c 22 36 44 43 42 45 35 37 42 2d 44 41 35 46 2d 34 33 30 39 2d 42 39 36 31 2d 34 33 36 32 33 33 31 44 41 32 38 46 22 3a 31 2c 22 37 31 45 37 32 34 38 36 2d 31 42 37 32 2d 34 38 30 31 2d 38 31 33 31 2d 44 42 38 36 45 34 37 30 43 32 31 30 22 3a 31 2c 22 33 33 33 30 32 33 35 36 2d 36 35 46 44 2d 34 45 41 42 2d 41 36 31 34 2d 42 39 39 31 34 37 31 42 39 31 31 46 22 3a 31 2c 22 33 36 45 45 46 46 39 33 2d 43 33 31 46 2d 34 41 41 42 2d 42 46 37 38 2d 42 33 42 44 43 44 37 33 39 32 38 37 22 3a 31 2c 22 41 33 46 38 45 35 38 38 2d 45 38 32 42 2d 34 33 31 37 2d 41 45 46 31 2d 31 41 38 45 31 34 33 39 38 39 37 46 22 3a 31 2c 22 31 38 46 38 46 43 38 46 2d 33 46 30 44 2d 34 33 46 46 2d 42 46 41 38 2d 43 38 38 30 45 31 39 44 30 45 30 44 Data Ascii: F2953F9B1":1,"6DCBE57B-DA5F-4309-B961-4362331DA28F":1,"71E72486-1B72-4801-8131-DB86E470C210":1,"33302356-65FD-4EAB-A614-B991471B911F":1,"36EEFF93-C31F-4AAB-BF78-B3BDCD739287":1,"A3F8E588-E82B-4317-AEF1-1A8E1439897F":1,"18F8FC8F-3F0D-43FF-BFA8-C880E19D0E0D
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 41 30 30 44 2d 38 38 41 44 36 38 39 45 42 30 41 33 22 3a 31 2c 22 32 36 46 44 38 36 43 42 2d 34 32 45 30 2d 34 32 36 32 2d 38 33 42 42 2d 35 43 33 36 39 44 30 30 45 35 42 46 22 3a 31 2c 22 37 42 33 34 42 36 38 32 2d 36 39 36 43 2d 34 46 44 36 2d 39 33 37 41 2d 43 42 37 36 42 31 30 45 39 32 45 32 22 3a 31 2c 22 37 46 46 38 42 32 44 41 2d 35 38 32 34 2d 34 44 43 44 2d 41 39 46 36 2d 44 41 45 30 41 34 33 39 32 37 32 46 22 3a 31 2c 22 41 42 33 41 44 31 30 39 2d 46 31 42 35 2d 34 33 43 35 2d 38 33 36 34 2d 33 31 39 31 45 31 38 35 35 39 33 33 22 3a 31 2c 22 33 30 38 32 37 41 31 33 2d 38 46 31 43 2d 34 37 45 34 2d 41 36 44 32 2d 34 30 32 45 31 37 39 35 36 39 34 39 22 3a 31 2c 22 39 32 46 44 41 42 32 39 2d 34 42 43 46 2d 34 32 37 46 2d 39 34 36 43 2d 44 35 45 38 Data Ascii: A00D-88AD689EB0A3":1,"26FD86CB-42E0-4262-83BB-5C369D00E5BF":1,"7B34B682-696C-4FD6-937A-CB76B10E92E2":1,"7FF8B2DA-5824-4DCD-A9F6-DAE0A439272F":1,"AB3AD109-F1B5-43C5-8364-3191E1855933":1,"30827A13-8F1C-47E4-A6D2-402E17956949":1,"92FDAB29-4BCF-427F-946C-D5E8
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 42 42 2d 34 36 35 37 2d 38 46 33 45 2d 34 38 33 35 32 44 45 36 32 38 44 32 22 3a 31 2c 22 33 33 42 35 36 33 44 35 2d 30 45 46 44 2d 34 44 42 41 2d 41 36 38 38 2d 32 30 41 32 31 39 42 37 43 34 41 37 22 3a 31 2c 22 39 36 41 36 46 42 42 44 2d 33 30 44 33 2d 34 34 35 42 2d 41 33 37 38 2d 39 41 32 45 46 33 35 37 32 38 39 37 22 3a 31 2c 22 46 33 39 30 31 44 43 36 2d 37 37 31 46 2d 34 30 37 39 2d 41 43 31 35 2d 42 33 44 31 44 33 35 43 46 32 42 37 22 3a 31 2c 22 38 46 30 43 34 37 43 46 2d 31 42 30 35 2d 34 39 30 46 2d 39 35 37 36 2d 34 33 36 37 37 35 33 32 34 32 45 35 22 3a 31 2c 22 32 35 45 34 35 31 37 43 2d 31 39 35 46 2d 34 36 44 32 2d 42 33 45 45 2d 42 34 31 32 37 41 32 46 37 44 35 37 22 3a 31 2c 22 33 30 41 44 30 33 42 43 2d 34 35 39 45 2d 34 45 32 30 2d 39 Data Ascii: BB-4657-8F3E-48352DE628D2":1,"33B563D5-0EFD-4DBA-A688-20A219B7C4A7":1,"96A6FBBD-30D3-445B-A378-9A2EF3572897":1,"F3901DC6-771F-4079-AC15-B3D1D35CF2B7":1,"8F0C47CF-1B05-490F-9576-4367753242E5":1,"25E4517C-195F-46D2-B3EE-B4127A2F7D57":1,"30AD03BC-459E-4E20-9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49717	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:32 UTC	731	OUT	GET /_layouts/15/1033/styles/corev15.css?rev=L%2FSON7jfOnEuOi%2FFA2qO%2Bw%3D%3DTAG431 HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:32 UTC	727	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 341640 Content-Type: text/css Last-Modified: Sat, 05 Oct 2024 04:28:45 GMT Accept-Ranges: bytes ETag: "c7413011df16db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,193,0,26332,92 SPRequestDuration: 5 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: ACF991BCCB6D4FC8A822010EEB53A5D3 Ref B: EWR311000102037 Ref C: 2024-10-07T09:38:32Z Date: Mon, 07 Oct 2024 09:38:32 GMT Connection: close
2024-10-07 09:38:32 UTC	3443	IN	Data Raw: 2f 2a 20 5f 6c 63 69 64 3d 22 31 30 33 33 22 0d 0a 5f 4c 6f 63 61 6c 42 69 6e 64 69 6e 67 20 2a 2f 0d 0a 62 6f 64 79 2c 0d 0a 2e 6d 73 2d 63 6f 72 65 2d 64 65 66 61 75 6c 74 46 6f 6e 74 2c 0d 0a 23 70 61 67 65 53 74 61 74 75 73 42 61 72 2c 0d 0a 23 68 79 62 72 69 64 54 6f 6f 6c 74 69 70 53 74 61 74 75 73 42 61 72 2c 0d 0a 2e 6d 73 2d 73 74 61 74 75 73 2d 6d 73 67 2c 0d 0a 2e 6a 73 2d 63 61 6c 6c 6f 75 74 2d 62 6f 64 79 0d 0a 7b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 46 6f 6e 74 28 74 68 65 6d 65 46 6f 6e 74 3a 22 62 6f 64 79 22 29 5d 20 2a 2f 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 53 65 67 6f 65 22 2c 54 61 68 6f 6d 61 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 66 6f 6e 74 Data Ascii: /* _lcid="1033"_LocalBinding /body,.ms-core-defaultFont,#pageStatusBar,#hybridTooltipStatusBar,.ms-status-msg,.js-callout-body{/ [ReplaceFont(themeFont:"body")] */ font-family:"Segoe UI","Segoe",Tahoma,Helvetica,Arial,sans-serif;font
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 42 75 74 74 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 22 29 5d 20 2a 2f 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 64 66 64 66 64 3b 0d 0a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 46 6f 6e 74 28 74 68 65 6d 65 46 6f 6e 74 3a 22 62 6f 64 79 22 29 5d 20 2a 2f 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 53 65 67 6f 65 22 2c 54 61 68 6f 6d 61 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 42 75 74 74 6f 6e Data Ascii: /* [ReplaceColor(themeColor:"ButtonBackground")] / background-color:#fdfdfd;margin-left:10px;/ [ReplaceFont(themeFont:"body")] / font-family:"Segoe UI","Segoe",Tahoma,Helvetica,Arial,sans-serif;font-size:11px;/ [ReplaceColor(themeColor:"Button
2024-10-07 09:38:32 UTC	4144	IN	Data Raw: 6e 3a 61 75 74 6f 20 32 30 70 78 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 63 6f 72 65 2d 70 61 67 65 54 69 74 6c 65 2c 0d 0a 2e 6d 73 2d 63 6f 72 65 2d 70 61 67 65 54 69 74 6c 65 20 61 0d 0a 7b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 46 6f 6e 74 28 74 68 65 6d 65 46 6f 6e 74 3a 22 74 69 74 6c 65 22 29 5d 20 2a 2f 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 20 4c 69 67 68 74 22 2c 22 53 65 67 6f 65 20 55 49 22 2c 22 53 65 67 6f 65 22 2c 54 61 68 6f 6d 61 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 53 69 74 65 54 69 74 6c 65 22 29 5d 20 2a 2f 20 63 6f 6c 6f 72 3a 23 32 36 32 36 32 36 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 63 Data Ascii: n:auto 20px;}.ms-core-pageTitle,.ms-core-pageTitle a{/* [ReplaceFont(themeFont:"title")] / font-family:"Segoe UI Light","Segoe UI","Segoe",Tahoma,Helvetica,Arial,sans-serif;/ [ReplaceColor(themeColor:"SiteTitle")] */ color:#262626;}.ms-c
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 63 6f 72 65 2d 68 65 61 64 65 72 20 2e 6d 73 2d 73 72 63 68 2d 73 62 0d 0a 7b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 48 65 61 64 65 72 42 61 63 6b 67 72 6f 75 6e 64 22 2c 6f 70 61 63 69 74 79 3a 22 31 22 29 5d 20 2a 2f 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 48 65 61 64 65 72 42 61 63 6b 67 72 6f 75 6e 64 22 29 5d 20 2a 2f 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 20 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 38 35 20 29 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 73 72 63 68 2d 73 62 2d 62 6f 72 64 65 72 Data Ascii: inline-block;}.ms-core-header .ms-srch-sb{/* [ReplaceColor(themeColor:"HeaderBackground",opacity:"1")] / background-color:#fff;/ [ReplaceColor(themeColor:"HeaderBackground")] */ background-color:rgba( 255,255,255,0.85 );}.ms-srch-sb-border
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 64 49 45 46 69 6c 74 65 72 20 2e 6d 73 2d 73 74 6f 72 65 66 72 6f 6e 74 2d 61 70 70 69 63 6f 6e 73 70 61 6e 0d 0a 7b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 45 6d 70 68 61 73 69 73 42 61 63 6b 67 72 6f 75 6e 64 22 29 5d 20 2a 2f 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 2c 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 23 66 66 30 30 37 32 63 36 2c 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 23 66 66 30 30 37 32 63 36 29 22 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 73 74 Data Ascii: dIEFilter .ms-storefront-appiconspan{background-color:transparent;/* [ReplaceColor(themeColor:"EmphasisBackground")] */ -ms-filter:"progid:DXImageTransform.Microsoft.gradient(GradientType=0,startColorstr=#ff0072c6,endColorstr=#ff0072c6)";}.ms-st
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 3a 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 63 6f 72 65 2d 66 6f 72 6d 2d 65 72 72 6f 72 2c 0d 0a 2e 6d 73 2d 65 72 72 6f 72 2c 0d 0a 2e 6d 73 2d 66 6f 72 6d 76 61 6c 69 64 61 74 69 6f 6e 2c 0d 0a 2e 6d 73 2d 64 69 66 66 64 65 6c 65 74 65 6e 6f 73 74 72 69 6b 65 2c 0d 0a 2e 6d 73 2d 64 69 66 66 64 65 6c 65 74 65 0d 0a 7b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 45 72 72 6f 72 54 65 78 74 22 29 5d 20 2a 2f 20 63 6f 6c 6f 72 3a 23 62 66 30 30 30 30 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 74 6f 6f 6c 74 69 70 0d 0a 7b 0d 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0d 0a 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 65 6d 70 74 79 4d 6f 64 Data Ascii: :none;}.ms-core-form-error,.ms-error,.ms-formvalidation,.ms-diffdeletenostrike,.ms-diffdelete{/* [ReplaceColor(themeColor:"ErrorText")] */ color:#bf0000;}.ms-tooltip{text-decoration:none;border-bottom:1px dotted;}.ms-emptyMod
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 69 6e 64 65 6e 74 0d 0a 7b 0d 0a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 70 78 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 68 69 67 68 43 6f 6e 74 72 61 73 74 42 6f 72 64 65 72 0d 0a 7b 0d 0a 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 63 75 72 73 6f 72 44 65 66 61 75 6c 74 0d 0a 7b 0d 0a 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 63 75 72 73 6f 72 50 6f 69 6e 74 65 72 0d 0a 7b 0d 0a 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 73 68 61 64 6f 77 0d 0a 7b 0d 0a 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 30 70 78 20 37 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 30 2c Data Ascii: margin-left:20px;}.ms-indent{margin-left:25px;}.ms-highContrastBorder{border:1px solid transparent;}.ms-cursorDefault{cursor:default;}.ms-cursorPointer{cursor:pointer;}.ms-shadow{box-shadow:0px 0px 7px 0px rgba(0,0,
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 72 3a 22 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 33 22 2c 6f 70 61 63 69 74 79 3a 22 31 22 29 5d 20 2a 2f 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 38 38 30 35 34 3b 7d 0d 0a 2e 6d 73 2d 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 34 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 7b 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 34 22 2c 6f 70 61 63 69 74 79 3a 22 31 22 29 5d 20 2a 2f 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 37 36 37 39 35 36 3b 7d 0d 0a 2e 6d 73 2d 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 35 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 7b 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 35 22 2c 6f 70 Data Ascii: r:"ContentAccent3",opacity:"1")] / border-color:#288054;}.ms-ContentAccent4-borderColor{/ [ReplaceColor(themeColor:"ContentAccent4",opacity:"1")] / border-color:#767956;}.ms-ContentAccent5-borderColor{/ [ReplaceColor(themeColor:"ContentAccent5",op
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 69 67 68 74 65 73 74 22 3b 0d 0a 2f 2a 20 5b 43 6f 6c 6f 72 4e 61 6d 65 5d 20 2a 2f 20 2d 6d 73 2d 63 6f 6c 6f 72 3a 22 4c 69 67 68 74 20 42 6c 75 65 22 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 72 74 65 54 68 65 6d 65 46 6f 72 65 43 6f 6c 6f 72 2d 36 2d 31 0d 0a 7b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 32 2d 4c 69 67 68 74 65 73 74 22 2c 6f 70 61 63 69 74 79 3a 22 31 22 29 5d 20 2a 2f 20 63 6f 6c 6f 72 3a 23 44 35 46 36 46 46 3b 0d 0a 2d 6d 73 2d 6e 61 6d 65 3a 22 41 63 63 65 6e 74 20 32 20 4c 69 67 68 74 65 73 74 22 3b 0d 0a 2f 2a 20 5b 43 6f 6c 6f 72 4e 61 6d 65 5d 20 2a 2f 20 2d 6d 73 2d 63 6f 6c 6f 72 3a 22 50 69 6e 6b 22 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 72 74 65 54 68 65 Data Ascii: ightest";/* [ColorName] / -ms-color:"Light Blue";}.ms-rteThemeForeColor-6-1{/ [ReplaceColor(themeColor:"ContentAccent2-Lightest",opacity:"1")] / color:#D5F6FF;-ms-name:"Accent 2 Lightest";/ [ColorName] */ -ms-color:"Pink";}.ms-rteThe
2024-10-07 09:38:32 UTC	8192	IN	Data Raw: 20 34 20 44 61 72 6b 65 73 74 22 3b 0d 0a 2f 2a 20 5b 43 6f 6c 6f 72 4e 61 6d 65 5d 20 2a 2f 20 2d 6d 73 2d 63 6f 6c 6f 72 3a 22 42 72 6f 77 6e 22 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 72 74 65 54 68 65 6d 65 46 6f 72 65 43 6f 6c 6f 72 2d 39 2d 35 0d 0a 7b 0d 0a 2f 2a 20 5b 52 65 70 6c 61 63 65 43 6f 6c 6f 72 28 74 68 65 6d 65 43 6f 6c 6f 72 3a 22 43 6f 6e 74 65 6e 74 41 63 63 65 6e 74 35 2d 44 61 72 6b 65 73 74 22 2c 6f 70 61 63 69 74 79 3a 22 31 22 29 5d 20 2a 2f 20 63 6f 6c 6f 72 3a 23 37 36 30 30 31 39 3b 0d 0a 2d 6d 73 2d 6e 61 6d 65 3a 22 41 63 63 65 6e 74 20 35 20 44 61 72 6b 65 73 74 22 3b 0d 0a 2f 2a 20 5b 43 6f 6c 6f 72 4e 61 6d 65 5d 20 2a 2f 20 2d 6d 73 2d 63 6f 6c 6f 72 3a 22 44 61 72 6b 20 47 72 65 65 6e 22 3b 0d 0a 7d 0d 0a 2e 6d 73 2d 72 74 65 54 Data Ascii: 4 Darkest";/* [ColorName] / -ms-color:"Brown";}.ms-rteThemeForeColor-9-5{/ [ReplaceColor(themeColor:"ContentAccent5-Darkest",opacity:"1")] / color:#760019;-ms-name:"Accent 5 Darkest";/ [ColorName] */ -ms-color:"Dark Green";}.ms-rteT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49720	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:32 UTC	723	OUT	GET /_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG431 HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:32 UTC	727	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 622 Content-Type: text/css Last-Modified: Sat, 05 Oct 2024 04:29:10 GMT Accept-Ranges: bytes ETag: "fd1cbd1fdf16db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,94,72633,0,59942,92 SPRequestDuration: 6 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 8F9C3F88AC734B5BAE677E88B2EF3EC5 Ref B: EWR311000105045 Ref C: 2024-10-07T09:38:32Z Date: Mon, 07 Oct 2024 09:38:32 GMT Connection: close
2024-10-07 09:38:32 UTC	622	IN	Data Raw: 2f 2a 20 5f 6c 63 69 64 3d 22 31 30 33 33 22 0d 0a 5f 4c 6f 63 61 6c 42 69 6e 64 69 6e 67 20 2a 2f 0d 0a 23 6d 73 2d 65 72 72 6f 72 2d 68 65 61 64 65 72 0d 0a 7b 0d 0a 6d 61 72 67 69 6e 3a 31 31 38 70 78 20 30 70 78 20 31 36 70 78 3b 0d 0a 6d 69 6e 2d 68 65 69 67 68 74 3a 35 30 70 78 3b 0d 0a 7d 0d 0a 23 6d 73 2d 65 72 72 6f 72 2d 67 6f 62 61 63 6b 63 6f 6e 74 0d 0a 7b 0d 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 38 70 78 3b 0d 0a 7d 0d 0a 23 6d 73 2d 61 63 63 65 73 73 44 65 6e 69 65 64 2d 72 65 71 44 69 61 6c 6f 67 0d 0a 7b 0d 0a 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 0d 0a 7d 0d 0a 23 6d 73 2d 65 72 72 6f 72 2d 62 6f 64 79 0d 0a 7b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 61 75 74 6f 3b 0d 0a 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 0d Data Ascii: /* _lcid="1033"_LocalBinding */#ms-error-header{margin:118px 0px 16px;min-height:50px;}#ms-error-gobackcont{margin-top:28px;}#ms-accessDenied-reqDialog{max-width:100%;}#ms-error-body{background-size:auto;overflow:auto;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49722	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:32 UTC	862	OUT	GET /ScriptResource.axd?d=Y95KWyn7ekYuwqxi5xwzpQ89_l89h1UBww-3bDCQj9NMZpziHZD9vXBTpP8g1aDemgZgbhhM0qshxRyh9vSI2xCMiHT6hhgkhUBTLFHAyzzITv1_EekQYaUkLSEtWv8MG4xrOoVqjgOAoesh0S0wth_SGHj9izKFfkE1qf5qOOpZqim4wiZYp_Q2PCtWNR0E0&t=7a0cc936 HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:33 UTC	780	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 25609 Content-Type: application/x-javascript Content-Encoding: gzip Expires: Tue, 07 Oct 2025 09:38:32 GMT Last-Modified: Mon, 07 Oct 2024 09:38:32 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,94,74952,0,67155,92 X-AspNet-Version: 4.0.30319 SPRequestDuration: 19 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 22EEB324F9444E10AAE434BEC45DEC19 Ref B: EWR311000106035 Ref C: 2024-10-07T09:38:32Z Date: Mon, 07 Oct 2024 09:38:32 GMT Connection: close
2024-10-07 09:38:33 UTC	3390	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd d9 72 1b 49 92 28 fa 3e 66 f3 0f 64 8e 8a 42 36 92 20 29 55 2f 05 28 c5 d1 da a5 1e 6d 47 52 75 77 0d c9 96 e5 06 20 49 10 c9 42 02 92 58 04 be ec 3c dc 4f ba bf 70 7d 89 3d 23 01 50 aa 3e 73 8f 59 97 95 a4 44 2c 1e 11 1e 1e 1e 1e 1e ee 1e ff ef ff fe 7f 0e 0e f6 bf fa bf 7f ff b7 83 83 9d 27 d5 d5 f5 ac 1c 8d e7 3b 9d 27 e1 ce ab 32 9b 55 75 35 9c 43 fa ec aa 9a 25 f3 b2 9a f6 76 1e 4d 26 3b 54 a8 de 99 15 75 31 fb 54 e4 3d ac fd 8d 6d ab d6 1e 9d 27 5f 7a e7 f5 bf ff db f3 c5 34 a3 26 3f 7e 9c 5f 5f 15 af 93 cb 22 0e 64 62 30 30 b2 b3 49 52 d7 f1 7c b6 28 74 6a 36 2b 92 79 f1 24 99 4c d2 24 bb 88 87 22 bd 93 46 49 78 33 2b e6 8b d9 74 47 25 86 37 9f 92 d9 4e 11 27 b3 d1 e2 b2 98 ce eb de a4 98 8e e6 e3 41 39 ec 14 0f Data Ascii: rI(>fdB6 )U/(mGRuw IBX<Op}=#P>sYD,';'2Uu5C%vM&;Tu1T=m'_z4&?~__"db00IR\|(tj6+y$L$"FIx3+tG%7N'A9
2024-10-07 09:38:33 UTC	8192	IN	Data Raw: b2 64 69 58 08 79 ae 99 1a 4b 5c d9 0f 59 26 5e dc d9 a4 57 7d 9e 16 b3 a7 55 46 e2 22 e2 25 d7 df d4 f7 dd 58 b1 99 b4 07 33 98 2c 26 f3 bf 96 c5 67 b4 4c 82 1d 11 4a fe 8d 58 f8 00 4e b0 50 96 8f 9b 59 2c 67 be 97 56 f9 b5 3d fd 72 4c bb d9 6a c0 52 8a a9 04 a2 94 40 65 18 12 38 27 25 79 ce 56 8b bd 62 fa cb a2 58 b8 67 32 53 3d 90 ae 74 25 c7 00 83 cb 92 24 6c e9 6c a4 d8 54 24 33 0b b9 12 68 7c a8 cb 80 68 e5 8a 1b aa 58 1c ab 03 f1 09 5e fe 9c 59 7a 22 d1 2b 6a 17 a7 96 8e 34 b6 b2 63 8d 82 48 1e bd 31 e3 a1 ee 50 5e b8 f8 50 d5 d4 45 8e 2c 0b 0c e4 59 92 19 37 04 69 84 a6 05 37 86 b2 3a 42 05 80 ef 78 01 22 ae 10 6c fd d7 62 21 6b db c8 fe 82 90 2a 1b 15 fd b6 d8 7c fb d8 32 63 3e 00 1f c5 cc da 1f 52 5c 71 09 c9 0c 19 5e f1 1f 46 99 2a ed 08 6a 9f Data Ascii: diXyK\Y&^W}UF"%X3,&gLJXNPY,gV=rLjR@e8'%yVbXg2S=t%$llT$3h\|hX^Yz"+j4cH1P^PE,Y7i7:Bx"lb!k\|2c>R\q^Fj
2024-10-07 09:38:33 UTC	4144	IN	Data Raw: 33 fa 46 10 7f a1 d1 fe 65 31 c1 f4 c5 08 81 16 57 f0 f7 9b 6c 8e 9c a5 fa 04 7f 03 03 83 bf b1 91 06 e4 45 32 bb 66 e8 33 f1 09 4d 64 63 6e a4 9c 98 cd 14 dc ce 35 37 b4 a8 e7 dc d6 bc a0 30 d3 d4 62 c5 5f d0 aa 4c 84 a6 e5 27 b6 df dc 54 99 f7 c9 a5 fa 9a f7 71 65 f0 b8 a3 98 54 13 41 96 68 fd 4f 41 94 af 85 ff a3 08 03 5e 57 08 06 09 30 7a 4f 61 db 21 1f b4 c3 b3 55 68 44 75 fc f8 31 33 b4 12 71 1c 54 f4 5c 49 20 1e 0c 6b bd d0 69 93 a7 2c 78 e1 20 2f 26 c5 bc b0 5b 61 5d f5 d7 81 57 e2 5a 31 dd ff e9 fd 3f 4b 66 23 cd fa ff 94 d0 76 e7 5f f2 da bf e4 b5 7f c9 6b 1c c8 e6 9f 27 b0 09 11 2a 62 81 68 cc c2 d6 ce 7c be 46 66 b3 aa 78 85 36 0b cc ff a0 d8 76 b0 4e 68 c3 4e 72 0f ff af 10 db 10 69 0a e5 ff 92 db fe af 96 db c4 c6 fa 2f c1 ed 6b 05 b7 75 ef Data Ascii: 3Fe1WlE2f3Mdcn570b_L'TqeTAhOA^W0zOa!UhDu13qT\I ki,x /&[a]WZ1?Kf#v_k'*bh\|Ffx6vNhNri/ku
2024-10-07 09:38:33 UTC	8192	IN	Data Raw: e7 1f 83 5c cb df 30 bf 7a c1 ba c4 49 f6 4b da 6e 7c 03 09 bc 4f 86 c9 ac dc 76 f9 0a e3 ee 1e 9f 2d f7 f6 e4 17 00 cd 96 cb cc 5a ce 9b 57 4f 4e 56 58 c0 f9 e5 23 e8 23 fe 27 15 af c4 67 83 64 70 1e 27 51 67 14 c3 9e a6 b4 26 6f 89 12 c3 b0 f5 6c 25 e2 c1 bc 9f 5f 4f c8 14 4c 2e f6 79 32 c2 9d ef 58 7d d9 61 0c fb 92 8e 3b b2 25 5e 85 f2 17 ae aa bd 3d 3a 0f 05 8f df 3c fd 19 68 9a e4 e1 51 ef 8a a2 85 b0 0e 30 49 eb 6a b2 98 17 68 be 78 93 77 63 13 d6 a0 d0 bf 71 0e f9 21 02 0f 9d 3f 8c ef 53 65 fd ec 0d 50 33 ae 1b 84 42 b4 19 22 ac 46 36 00 e5 dc d5 6a 2b e4 64 8c 9c 71 9c 1e a7 6a 14 0a 0f bb b0 2f 8f ed 31 89 89 31 38 31 cc 11 4e 8d 4e 80 63 d7 2d 70 ad b1 c9 26 ee c1 8f 1f 5e bd 84 ef 4e 62 71 c2 c4 e0 6c 80 99 fd d8 ce 3e 1c 14 3a 89 58 e1 e1 76 Data Ascii: \0zIKn\|Ov-ZWONVX##'gdp'Qg&ol%_OL.y2X}a;%^=:<hQ0Ijhxwcq!?SeP3B"F6j+dqj/1181NNc-p&^Nbql>:Xv
2024-10-07 09:38:33 UTC	1691	IN	Data Raw: d8 29 04 89 6a df ac dc 63 ef 6c 23 8c fb d7 23 1b eb 1a 8d e6 3b 0d 04 06 61 98 89 d6 d8 91 51 3c e7 b7 d3 a8 a9 3d bb 54 0d f8 25 8b cb 24 db 2b 51 d8 03 c1 84 10 11 5c f8 fb 8c fd 10 16 a4 d1 38 be c0 19 40 f6 41 93 39 e6 77 21 a1 c9 cd eb 2d 93 eb 0d be f4 fa 81 1f d6 ca 89 b2 70 e5 1f a1 17 37 bb 99 92 1c b2 5e ee 88 d5 59 1f d2 b0 9b c3 07 c0 1b 96 cb e1 c3 f8 3e fe 3b 96 6c 82 ec f0 61 bf 19 6f 35 80 db 71 09 7a ce d0 58 fa 43 58 fa 99 67 e9 8b 34 75 49 55 0e 14 05 4a c3 5a 20 bc 32 be 05 b7 16 24 b2 b1 8a dd 61 c9 c8 d7 21 c2 ed 57 54 46 41 00 ff 87 62 60 f2 7a a5 5d 28 fa 38 42 25 09 46 8e 80 59 cb 61 3d d4 40 4c 99 e5 61 a8 5f 39 74 5c f3 d3 d0 79 58 10 c5 33 7a 06 0d 37 09 96 6b 3f ce d9 48 4f 9c b8 59 7c 3f 6c ef 8e 90 8a e2 83 7f 9c d6 bf eb Data Ascii: )jcl##;aQ<=T%$+Q\8@A9w!-p7^Y>;lao5qzXCXg4uIUJZ 2$a!WTFAb`z](8B%FYa=@La_9t\yX3z7k?HOY\|?l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49721	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:32 UTC	862	OUT	GET /ScriptResource.axd?d=qhBccBdfxmhNi2koPsPq5vCTIhttDwhkUDoMZ4RbYTwZjbqEXkdT_9ygDUt4eyaEEgC5l7UGu06MHFqhrxxIyxAKOSIlZ_UXaSmqSxQiJX2WJs13nKCvnzCBe07LFdqq158ZQGqRupsoc2da9r-RxcdS0Ha9_gSQPeqUjlW-OPNanv8KQuUzddZ3k63dpS_t0&t=7a0cc936 HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:33 UTC	778	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 9984 Content-Type: application/x-javascript Content-Encoding: gzip Expires: Tue, 07 Oct 2025 09:38:32 GMT Last-Modified: Mon, 07 Oct 2024 09:38:32 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,100098,0,32326,92 X-AspNet-Version: 4.0.30319 SPRequestDuration: 9 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 43D87D3507F04AEDB9F31BD92026FE21 Ref B: EWR311000105029 Ref C: 2024-10-07T09:38:32Z Date: Mon, 07 Oct 2024 09:38:32 GMT Connection: close
2024-10-07 09:38:33 UTC	1615	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e5 7d 6b 73 db 48 92 e0 f7 89 98 ff 40 61 7b 65 62 55 86 e4 de bd b8 08 d2 68 85 5e 9e d6 9e 5f 61 cb d3 33 21 6b 15 05 a0 48 42 02 01 1a 00 6d ab 25 fe b2 fb b0 3f 69 ff c2 65 d6 0b 55 40 81 a4 e4 9e bd 8b b8 89 1e 99 a8 77 65 66 65 66 65 66 55 fd d7 ff fe cf fd fd e7 4f fe df 9f ff b4 bf 3f 38 29 16 77 65 3a 9d d5 83 e1 89 3f 78 93 c6 65 51 15 93 1a d2 cb 45 51 d2 3a 2d f2 60 70 94 65 03 5e a8 1a 94 ac 62 e5 57 96 04 58 fb 07 fb d6 bd 1d dd d0 ef bf b1 e8 55 51 ce ab e0 a6 fa f3 9f 2e ee 16 2c b8 2e d9 34 ad 6a 56 7e 8c cb 74 51 0f bd be f2 1e b9 b4 f3 60 f0 8c a7 db c9 1f 59 99 d2 2c fd 5d cc aa 9b ff 96 d5 df 8a f2 d6 91 73 52 cc 17 45 ce f2 fa 4d 91 b0 0c 0b 5c f9 63 3e 48 35 c6 b7 74 ce aa 05 8d d9 d0 fb 78 57 05 6a 74 Data Ascii: }ksH@a{ebUh^_a3!kHBm%?ieU@wefefefUO?8)we:?xeQEQ:-`pe^bWXUQ.,.4jV~tQ`Y,]sREM\c>H5txWjt
2024-10-07 09:38:33 UTC	8192	IN	Data Raw: 2d ad 8c cf c4 90 ed 8f 50 9a 50 d4 45 aa 17 69 29 2a f2 9a a6 79 f5 a8 95 e3 46 02 4d ac d2 a1 4d 59 3b 8e 0e 4a a5 88 aa 3a 4a fb da a6 2c a8 a0 24 09 37 c8 56 3d 79 ad 18 86 4a 45 7b fe 62 1c fd 12 1e 8c a3 e7 cf d5 c6 27 01 4d 11 d8 24 c3 49 0a 21 21 8a fa 38 fe 16 bc 70 bf e4 37 8c 07 3f dd d4 e9 e6 72 5d 04 8e 05 dd 7c 60 55 87 85 4b b5 8e 53 76 bb a1 b3 ef 31 5b 60 43 a3 81 b7 f7 91 2b 31 01 4c 76 4e 6b ce 21 49 1c 72 3e 24 a9 02 b6 7a f7 39 40 66 b4 be 2d 8f 48 c8 7d 2a 33 0f 55 f7 71 1c 2c 80 67 d4 c0 74 5e 95 08 59 5f 91 51 ec 9c 73 9b 74 9e 46 0c 5b 92 c1 36 d4 08 7c 4f 0e 78 9b 46 1d 16 0f 69 87 7c 43 73 f8 70 18 27 10 e6 a6 8c 10 0b fe 94 4d e8 32 ab 8f 97 75 6d 6f d1 1d d9 27 59 1a df b6 bc 23 86 91 f5 fc d4 da fd 1b 39 50 11 c8 be 3f ff 57 Data Ascii: -PPEi)yFMMY;J:J,$7V=yJE{b'M$I!!8p7?r]\|`UKSv1[`C+1LvNk!Ir>$z9@f-H}3Uq,gt^Y_QstF[6\|OxFi\|Csp'M2umo'Y#9P?W
2024-10-07 09:38:33 UTC	177	IN	Data Raw: 98 a5 5f 1d 2d c4 1a 8e 30 5b 1e 21 96 04 83 93 62 3e 87 21 c5 74 59 b1 6a 00 5b 69 ae b5 cb 19 81 62 03 93 61 b9 9c 80 88 c4 47 a8 ce 8b 24 9d a4 d0 47 74 37 40 68 56 80 d1 c1 07 59 20 f8 ad 4c 51 71 23 4d 95 49 9a 01 f5 54 64 f0 6b 5d 2f de 14 c9 32 63 f0 01 3d c8 a1 e1 8d f4 bc 61 96 f3 8b 6e 02 74 2a c8 e0 6b 73 d6 e6 f9 46 39 6d d9 82 02 2f 3f 3d 39 80 32 41 17 50 b2 41 a8 c8 3f 39 0c 10 3d 39 88 90 3e 5a 74 5c 13 27 3b ee b2 11 00 45 2e c1 db 88 83 04 80 55 a2 4d 8a e6 80 fb 98 05 de 6a fc 7f 00 32 91 1d 1f 89 9d 00 00 Data Ascii: _-0[!b>!tYj[ibaG$Gt7@hVY LQq#MITdk]/2c=ant*ksF9m/?=92APA?9=9>Zt\';E.UMj2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49727	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:32 UTC	784	OUT	GET /WebResource.axd?d=-bVcVLsQPGhVD_FPS-Lpzf2QoNfYWRIQPIhg8fEJvuU63gpMUc-aN-bVZ2st-sDtVoGX2V0ieSMFB34YQGpme6qqzNPQxRnnJ_sYmvGtX2w1&t=638611486345608193 HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:33 UTC	751	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 23063 Content-Type: application/x-javascript Expires: Mon, 06 Oct 2025 23:14:20 GMT Last-Modified: Thu, 05 Sep 2024 22:57:14 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,60,0,26332,20 X-AspNet-Version: 4.0.30319 SPRequestDuration: 5 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 57DDBA63E40E43DB9BB5FF8F8A6F8EC2 Ref B: EWR311000108023 Ref C: 2024-10-07T09:38:32Z Date: Mon, 07 Oct 2024 09:38:33 GMT Connection: close
2024-10-07 09:38:33 UTC	3462	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-10-07 09:38:33 UTC	8192	IN	Data Raw: 78 6d 6c 52 65 71 75 65 73 74 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 65 2e 67 2e 20 68 74 74 70 3a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 63 74 69 6f 6e 20 3d 20 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2c 20 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 20 3d 20 61 63 74 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 20 21 3d 3d 20 2d 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 6f 6e 20 3d 20 61 63 74 69 6f 6e 2e 73 75 62 73 74 72 28 30 2c 20 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 Data Ascii: xmlRequest; // e.g. http: var action = theForm.action \|\| document.location.pathname, fragmentIndex = action.indexOf('#'); if (fragmentIndex !== -1) { action = action.substr(0, fragmentIndex); } if
2024-10-07 09:38:33 UTC	4101	IN	Data Raw: 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 78 70 6c 6f 72 65 72 27 29 20 3d 3d 20 2d 31 29 3b 0d 0a 76 61 72 20 5f 5f 74 68 65 46 6f 72 6d 50 6f 73 74 44 61 74 61 20 3d 20 22 22 3b 0d 0a 76 61 72 20 5f 5f 74 68 65 46 6f 72 6d 50 6f 73 74 43 6f 6c 6c 65 63 74 69 6f 6e 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 76 61 72 20 5f 5f 63 61 6c 6c 62 61 63 6b 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 68 69 64 64 65 6e 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 29 24 2f 69 3b 0d 0a 66 Data Ascii: owerCase().indexOf('explorer') == -1);var __theFormPostData = "";var __theFormPostCollection = new Array();var __callbackTextTypes = /^(text\|password\|hidden\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;f
2024-10-07 09:38:33 UTC	7308	IN	Data Raw: 20 20 20 20 20 20 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 61 72 67 65 74 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 29 20 7b 0d 0a 20 Data Ascii: defaultButton = document.all[target]; } if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__nonMSDOMBrowser) {

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49728	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:33 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:34 UTC	561	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:33 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093833Z-r154656d9bcmxqxrqrw0qrf8hg0000000ap0000000006s9c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:34 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-07 09:38:34 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-07 09:38:34 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-07 09:38:34 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-07 09:38:34 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-07 09:38:34 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-07 09:38:34 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-07 09:38:34 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-07 09:38:34 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-07 09:38:34 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49731	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:34 UTC	576	OUT	GET /ScriptResource.axd?d=qhBccBdfxmhNi2koPsPq5vCTIhttDwhkUDoMZ4RbYTwZjbqEXkdT_9ygDUt4eyaEEgC5l7UGu06MHFqhrxxIyxAKOSIlZ_UXaSmqSxQiJX2WJs13nKCvnzCBe07LFdqq158ZQGqRupsoc2da9r-RxcdS0Ha9_gSQPeqUjlW-OPNanv8KQuUzddZ3k63dpS_t0&t=7a0cc936 HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:34 UTC	780	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 9984 Content-Type: application/x-javascript Content-Encoding: gzip Expires: Tue, 07 Oct 2025 09:38:34 GMT Last-Modified: Mon, 07 Oct 2024 09:38:34 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,95,123914,0,57975,92 X-AspNet-Version: 4.0.30319 SPRequestDuration: 12 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 4171DCAE3CDA463D83487786BA7B473E Ref B: EWR311000106051 Ref C: 2024-10-07T09:38:34Z Date: Mon, 07 Oct 2024 09:38:34 GMT Connection: close
2024-10-07 09:38:34 UTC	3390	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e5 7d 6b 73 db 48 92 e0 f7 89 98 ff 40 61 7b 65 62 55 86 e4 de bd b8 08 d2 68 85 5e 9e d6 9e 5f 61 cb d3 33 21 6b 15 05 a0 48 42 02 01 1a 00 6d ab 25 fe b2 fb b0 3f 69 ff c2 65 d6 0b 55 40 81 a4 e4 9e bd 8b b8 89 1e 99 a8 77 65 66 65 66 65 66 55 fd d7 ff fe cf fd fd e7 4f fe df 9f ff b4 bf 3f 38 29 16 77 65 3a 9d d5 83 e1 89 3f 78 93 c6 65 51 15 93 1a d2 cb 45 51 d2 3a 2d f2 60 70 94 65 03 5e a8 1a 94 ac 62 e5 57 96 04 58 fb 07 fb d6 bd 1d dd d0 ef bf b1 e8 55 51 ce ab e0 a6 fa f3 9f 2e ee 16 2c b8 2e d9 34 ad 6a 56 7e 8c cb 74 51 0f bd be f2 1e b9 b4 f3 60 f0 8c a7 db c9 1f 59 99 d2 2c fd 5d cc aa 9b ff 96 d5 df 8a f2 d6 91 73 52 cc 17 45 ce f2 fa 4d 91 b0 0c 0b 5c f9 63 3e 48 35 c6 b7 74 ce aa 05 8d d9 d0 fb 78 57 05 6a 74 Data Ascii: }ksH@a{ebUh^_a3!kHBm%?ieU@wefefefUO?8)we:?xeQEQ:-`pe^bWXUQ.,.4jV~tQ`Y,]sREM\c>H5txWjt
2024-10-07 09:38:34 UTC	6594	IN	Data Raw: 7f 13 e0 c1 cc d8 f8 3b cd 7c 43 df ef 43 86 d5 0c ef a9 bb a7 a7 44 86 31 4d d4 66 92 db 2c b8 2e 3c 11 39 20 c3 ca 29 d7 87 ab 20 86 a6 19 3b 6c 27 88 7f ca 11 9f 2b da 06 44 cd 9b f0 5f 0f c6 df 40 7f 65 c3 24 e8 a9 b3 bb fb fc f9 8d 9f 84 bd 05 c6 93 f0 66 77 d7 cc 16 62 e1 d0 48 02 cd 78 24 0c 18 6b f6 e8 38 a2 99 69 21 40 99 13 8a ad 0a 88 0e b1 99 c1 04 63 33 a3 44 8a 61 0c 50 1b d0 c7 19 2a b8 05 c1 ef 33 2d 88 48 0d 33 ce 6d 4e d1 7f 8e 2a 8e d4 30 4e 49 16 f6 8a 37 ea 83 2c ec db 21 65 7c 87 b4 33 dd dd 8d 7d ee 42 4d 71 ab ff 0e f4 8b 3d ef 27 cf e7 31 40 6b 6a 07 20 cc aa ba 1c c6 12 ee 7b 2f 7c d9 20 b6 d6 f2 c1 ae 5d af a8 f7 3e d9 c8 c3 03 06 d4 c6 ad af e3 ee e2 7e 6a 9f 12 5f 1a 2f 4c 11 0e 00 ef 2d 83 3d 63 a5 e3 73 a8 2f 42 b3 d6 76 03 Data Ascii: ;\|CCD1Mf,.<9 ) ;l'+D_@e$fwbHx$k8i!@c3DaP3-H3mN0NI7,!e\|3}BMq='1@kj {/\| ]>~j_/L-=cs/Bv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49730	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:34 UTC	576	OUT	GET /ScriptResource.axd?d=Y95KWyn7ekYuwqxi5xwzpQ89_l89h1UBww-3bDCQj9NMZpziHZD9vXBTpP8g1aDemgZgbhhM0qshxRyh9vSI2xCMiHT6hhgkhUBTLFHAyzzITv1_EekQYaUkLSEtWv8MG4xrOoVqjgOAoesh0S0wth_SGHj9izKFfkE1qf5qOOpZqim4wiZYp_Q2PCtWNR0E0&t=7a0cc936 HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:34 UTC	777	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 25609 Content-Type: application/x-javascript Content-Encoding: gzip Expires: Tue, 07 Oct 2025 09:38:34 GMT Last-Modified: Mon, 07 Oct 2024 09:38:34 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,203,0,26332,92 X-AspNet-Version: 4.0.30319 SPRequestDuration: 14 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: CFBCDA79100D43A9BAF5D461755327CE Ref B: EWR311000106025 Ref C: 2024-10-07T09:38:34Z Date: Mon, 07 Oct 2024 09:38:34 GMT Connection: close
2024-10-07 09:38:34 UTC	3393	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd d9 72 1b 49 92 28 fa 3e 66 f3 0f 64 8e 8a 42 36 92 20 29 55 2f 05 28 c5 d1 da a5 1e 6d 47 52 75 77 0d c9 96 e5 06 20 49 10 c9 42 02 92 58 04 be ec 3c dc 4f ba bf 70 7d 89 3d 23 01 50 aa 3e 73 8f 59 97 95 a4 44 2c 1e 11 1e 1e 1e 1e 1e ee 1e ff ef ff fe 7f 0e 0e f6 bf fa bf 7f ff b7 83 83 9d 27 d5 d5 f5 ac 1c 8d e7 3b 9d 27 e1 ce ab 32 9b 55 75 35 9c 43 fa ec aa 9a 25 f3 b2 9a f6 76 1e 4d 26 3b 54 a8 de 99 15 75 31 fb 54 e4 3d ac fd 8d 6d ab d6 1e 9d 27 5f 7a e7 f5 bf ff db f3 c5 34 a3 26 3f 7e 9c 5f 5f 15 af 93 cb 22 0e 64 62 30 30 b2 b3 49 52 d7 f1 7c b6 28 74 6a 36 2b 92 79 f1 24 99 4c d2 24 bb 88 87 22 bd 93 46 49 78 33 2b e6 8b d9 74 47 25 86 37 9f 92 d9 4e 11 27 b3 d1 e2 b2 98 ce eb de a4 98 8e e6 e3 41 39 ec 14 0f Data Ascii: rI(>fdB6 )U/(mGRuw IBX<Op}=#P>sYD,';'2Uu5C%vM&;Tu1T=m'_z4&?~__"db00IR\|(tj6+y$L$"FIx3+tG%7N'A9
2024-10-07 09:38:34 UTC	8192	IN	Data Raw: 58 08 79 ae 99 1a 4b 5c d9 0f 59 26 5e dc d9 a4 57 7d 9e 16 b3 a7 55 46 e2 22 e2 25 d7 df d4 f7 dd 58 b1 99 b4 07 33 98 2c 26 f3 bf 96 c5 67 b4 4c 82 1d 11 4a fe 8d 58 f8 00 4e b0 50 96 8f 9b 59 2c 67 be 97 56 f9 b5 3d fd 72 4c bb d9 6a c0 52 8a a9 04 a2 94 40 65 18 12 38 27 25 79 ce 56 8b bd 62 fa cb a2 58 b8 67 32 53 3d 90 ae 74 25 c7 00 83 cb 92 24 6c e9 6c a4 d8 54 24 33 0b b9 12 68 7c a8 cb 80 68 e5 8a 1b aa 58 1c ab 03 f1 09 5e fe 9c 59 7a 22 d1 2b 6a 17 a7 96 8e 34 b6 b2 63 8d 82 48 1e bd 31 e3 a1 ee 50 5e b8 f8 50 d5 d4 45 8e 2c 0b 0c e4 59 92 19 37 04 69 84 a6 05 37 86 b2 3a 42 05 80 ef 78 01 22 ae 10 6c fd d7 62 21 6b db c8 fe 82 90 2a 1b 15 fd b6 d8 7c fb d8 32 63 3e 00 1f c5 cc da 1f 52 5c 71 09 c9 0c 19 5e f1 1f 46 99 2a ed 08 6a 9f d0 92 84 Data Ascii: XyK\Y&^W}UF"%X3,&gLJXNPY,gV=rLjR@e8'%yVbXg2S=t%$llT$3h\|hX^Yz"+j4cH1P^PE,Y7i7:Bx"lb!k\|2c>R\q^Fj
2024-10-07 09:38:34 UTC	4144	IN	Data Raw: 10 7f a1 d1 fe 65 31 c1 f4 c5 08 81 16 57 f0 f7 9b 6c 8e 9c a5 fa 04 7f 03 03 83 bf b1 91 06 e4 45 32 bb 66 e8 33 f1 09 4d 64 63 6e a4 9c 98 cd 14 dc ce 35 37 b4 a8 e7 dc d6 bc a0 30 d3 d4 62 c5 5f d0 aa 4c 84 a6 e5 27 b6 df dc 54 99 f7 c9 a5 fa 9a f7 71 65 f0 b8 a3 98 54 13 41 96 68 fd 4f 41 94 af 85 ff a3 08 03 5e 57 08 06 09 30 7a 4f 61 db 21 1f b4 c3 b3 55 68 44 75 fc f8 31 33 b4 12 71 1c 54 f4 5c 49 20 1e 0c 6b bd d0 69 93 a7 2c 78 e1 20 2f 26 c5 bc b0 5b 61 5d f5 d7 81 57 e2 5a 31 dd ff e9 fd 3f 4b 66 23 cd fa ff 94 d0 76 e7 5f f2 da bf e4 b5 7f c9 6b 1c c8 e6 9f 27 b0 09 11 2a 62 81 68 cc c2 d6 ce 7c be 46 66 b3 aa 78 85 36 0b cc ff a0 d8 76 b0 4e 68 c3 4e 72 0f ff af 10 db 10 69 0a e5 ff 92 db fe af 96 db c4 c6 fa 2f c1 ed 6b 05 b7 75 ef 99 be 2f Data Ascii: e1WlE2f3Mdcn570b_L'TqeTAhOA^W0zOa!UhDu13qT\I ki,x /&[a]WZ1?Kf#v_k'*bh\|Ffx6vNhNri/ku/
2024-10-07 09:38:34 UTC	8192	IN	Data Raw: 5c cb df 30 bf 7a c1 ba c4 49 f6 4b da 6e 7c 03 09 bc 4f 86 c9 ac dc 76 f9 0a e3 ee 1e 9f 2d f7 f6 e4 17 00 cd 96 cb cc 5a ce 9b 57 4f 4e 56 58 c0 f9 e5 23 e8 23 fe 27 15 af c4 67 83 64 70 1e 27 51 67 14 c3 9e a6 b4 26 6f 89 12 c3 b0 f5 6c 25 e2 c1 bc 9f 5f 4f c8 14 4c 2e f6 79 32 c2 9d ef 58 7d d9 61 0c fb 92 8e 3b b2 25 5e 85 f2 17 ae aa bd 3d 3a 0f 05 8f df 3c fd 19 68 9a e4 e1 51 ef 8a a2 85 b0 0e 30 49 eb 6a b2 98 17 68 be 78 93 77 63 13 d6 a0 d0 bf 71 0e f9 21 02 0f 9d 3f 8c ef 53 65 fd ec 0d 50 33 ae 1b 84 42 b4 19 22 ac 46 36 00 e5 dc d5 6a 2b e4 64 8c 9c 71 9c 1e a7 6a 14 0a 0f bb b0 2f 8f ed 31 89 89 31 38 31 cc 11 4e 8d 4e 80 63 d7 2d 70 ad b1 c9 26 ee c1 8f 1f 5e bd 84 ef 4e 62 71 c2 c4 e0 6c 80 99 fd d8 ce 3e 1c 14 3a 89 58 e1 e1 76 08 10 d4 Data Ascii: \0zIKn\|Ov-ZWONVX##'gdp'Qg&ol%_OL.y2X}a;%^=:<hQ0Ijhxwcq!?SeP3B"F6j+dqj/1181NNc-p&^Nbql>:Xv
2024-10-07 09:38:34 UTC	1688	IN	Data Raw: 89 6a df ac dc 63 ef 6c 23 8c fb d7 23 1b eb 1a 8d e6 3b 0d 04 06 61 98 89 d6 d8 91 51 3c e7 b7 d3 a8 a9 3d bb 54 0d f8 25 8b cb 24 db 2b 51 d8 03 c1 84 10 11 5c f8 fb 8c fd 10 16 a4 d1 38 be c0 19 40 f6 41 93 39 e6 77 21 a1 c9 cd eb 2d 93 eb 0d be f4 fa 81 1f d6 ca 89 b2 70 e5 1f a1 17 37 bb 99 92 1c b2 5e ee 88 d5 59 1f d2 b0 9b c3 07 c0 1b 96 cb e1 c3 f8 3e fe 3b 96 6c 82 ec f0 61 bf 19 6f 35 80 db 71 09 7a ce d0 58 fa 43 58 fa 99 67 e9 8b 34 75 49 55 0e 14 05 4a c3 5a 20 bc 32 be 05 b7 16 24 b2 b1 8a dd 61 c9 c8 d7 21 c2 ed 57 54 46 41 00 ff 87 62 60 f2 7a a5 5d 28 fa 38 42 25 09 46 8e 80 59 cb 61 3d d4 40 4c 99 e5 61 a8 5f 39 74 5c f3 d3 d0 79 58 10 c5 33 7a 06 0d 37 09 96 6b 3f ce d9 48 4f 9c b8 59 7c 3f 6c ef 8e 90 8a e2 83 7f 9c d6 bf eb 9c 24 fb Data Ascii: jcl##;aQ<=T%$+Q\8@A9w!-p7^Y>;lao5qzXCXg4uIUJZ 2$a!WTFAb`z](8B%FYa=@La_9t\yX3z7k?HOY\|?l$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49732	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:34 UTC	498	OUT	GET /WebResource.axd?d=-bVcVLsQPGhVD_FPS-Lpzf2QoNfYWRIQPIhg8fEJvuU63gpMUc-aN-bVZ2st-sDtVoGX2V0ieSMFB34YQGpme6qqzNPQxRnnJ_sYmvGtX2w1&t=638611486345608193 HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:34 UTC	758	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 23063 Content-Type: application/x-javascript Expires: Tue, 07 Oct 2025 04:53:10 GMT Last-Modified: Thu, 05 Sep 2024 22:57:14 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4194560,0,0,5746369,0,1071802,1 X-AspNet-Version: 4.0.30319 SPRequestDuration: 5 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 73C50E5BDC29412B926FB2B2854A4800 Ref B: EWR311000108019 Ref C: 2024-10-07T09:38:34Z Date: Mon, 07 Oct 2024 09:38:34 GMT Connection: close
2024-10-07 09:38:34 UTC	3412	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-10-07 09:38:34 UTC	8192	IN	Data Raw: 5f 43 61 6c 6c 62 61 63 6b 43 6f 6d 70 6c 65 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 2e 78 6d 6c 52 65 71 75 65 73 74 20 3d 20 78 6d 6c 52 65 71 75 65 73 74 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 65 2e 67 2e 20 68 74 74 70 3a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 63 74 69 6f 6e 20 3d 20 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2c 20 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 20 3d 20 61 63 74 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 66 72 61 67 6d 65 6e 74 49 6e 64 65 78 20 21 3d 3d 20 2d 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 63 74 69 6f 6e 20 3d 20 61 63 74 69 6f 6e Data Ascii: _CallbackComplete; callback.xmlRequest = xmlRequest; // e.g. http: var action = theForm.action \|\| document.location.pathname, fragmentIndex = action.indexOf('#'); if (fragmentIndex !== -1) { action = action
2024-10-07 09:38:34 UTC	4144	IN	Data Raw: 20 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 20 3d 20 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 78 70 6c 6f 72 65 72 27 29 20 3d 3d 20 2d 31 29 3b 0d 0a 76 61 72 20 5f 5f 74 68 65 46 6f 72 6d 50 6f 73 74 44 61 74 61 20 3d 20 22 22 3b 0d 0a 76 61 72 20 5f 5f 74 68 65 46 6f 72 6d 50 6f 73 74 43 6f 6c 6c 65 63 74 69 6f 6e 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 76 61 72 20 5f 5f 63 61 6c 6c 62 61 63 6b 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 68 69 64 64 65 6e 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 Data Ascii: __nonMSDOMBrowser = (window.navigator.appName.toLowerCase().indexOf('explorer') == -1);var __theFormPostData = "";var __theFormPostCollection = new Array();var __callbackTextTypes = /^(text\|password\|hidden\|search\|tel\|url\|email\|number\|range\|color\|da
2024-10-07 09:38:34 UTC	7315	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 61 72 67 65 74 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 Data Ascii: defaultButton = document.all[target]; } if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__nonMSDOMBrowse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49736	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:34 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 09:38:34 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=198428 Date: Mon, 07 Oct 2024 09:38:34 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49737	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:34 UTC	734	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:35 UTC	732	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Wed, 02 Oct 2024 03:10:09 GMT Accept-Ranges: bytes ETag: "afd0ff967814db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,94,64637,0,56675,92 SPRequestDuration: 8 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DE11E5B0CFA942CE833F921C8CA5ABAF Ref B: EWR311000101053 Ref C: 2024-10-07T09:38:34Z Date: Mon, 07 Oct 2024 09:38:34 GMT Connection: close
2024-10-07 09:38:35 UTC	3438	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2024-10-07 09:38:35 UTC	4448	IN	Data Raw: 00 00 00 00 00 00 00 00 70 6c 03 bf 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 bf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 40 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: plplplplplplplplplplplplplplplplplplpl@plplplplplplplplplplplplplplplplpl@

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49740	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:35 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:35 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:35 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: b4e56b29-201e-0000-2178-18a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093835Z-1767f7688dc5smv9fdkth3nru00000000rv0000000008xx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:35 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49742	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:35 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:35 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:35 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: ec1acd5e-601e-00ab-3736-1666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093835Z-r154656d9bcgk58qzsfr5pfzg40000000rxg000000008ber x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:35 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49739	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:35 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:35 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 265a1445-001e-00a2-25c7-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093835Z-1767f7688dcdvjcfkw13t1btbs0000000ry000000000cdt9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:35 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49741	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:35 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:35 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:35 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9d87bc3-001e-008d-128c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093835Z-r154656d9bcjpgqtzd4z33r5yn0000000ee0000000002447 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:35 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49743	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:35 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:35 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:35 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 4b0a31e7-c01e-00ad-448c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093835Z-1767f7688dc6trhkx0ckh4u3qn0000000s2g00000000bb8s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:35 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 09:38:36 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=198362 Date: Mon, 07 Oct 2024 09:38:36 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 09:38:36 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49755	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:35 UTC	388	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:36 UTC	733	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Wed, 02 Oct 2024 03:10:09 GMT Accept-Ranges: bytes ETag: "afd0ff967814db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,94,78109,0,85862,92 SPRequestDuration: 13 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AC357CC9560B49099778149A526A723A Ref B: EWR311000102035 Ref C: 2024-10-07T09:38:35Z Date: Mon, 07 Oct 2024 09:38:35 GMT Connection: close
2024-10-07 09:38:36 UTC	3437	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2024-10-07 09:38:36 UTC	4449	IN	Data Raw: 00 00 00 00 00 00 00 00 00 70 6c 03 bf 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 bf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 40 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: plplplplplplplplplplplplplplplplplplpl@plplplplplplplplplplplplplplplplpl@

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49756	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:35 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:35 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b2393cc3-501e-005b-768c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093835Z-1767f7688dcsjpdx60gbb8v42g0000000b2g00000000d5wh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:36 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49753	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:35 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:35 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 24b39cfc-301e-0096-2a8c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093835Z-1767f7688dc5std64kd3n8sca400000008dg00000000158p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49754	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:35 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:35 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 7e689a47-601e-0002-7978-18a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093835Z-1767f7688dc88qkvtwr7dy4vdn0000000a60000000007ybq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:36 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49752	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:35 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 757ce4f4-401e-000a-128c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093835Z-1767f7688dc9s2cg0vz2a9g5ms00000001600000000044bn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49751	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:35 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:35 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: aa8826a4-b01e-0053-608c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093835Z-r154656d9bczbzfnyr5sz58vdw0000000e7g00000000d3xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:36 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49758	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:36 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:36 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: cc223d3c-501e-008f-0ec7-179054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093836Z-1767f7688dc97m2se6u6hv466400000007pg000000006zzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:36 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49759	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:36 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:36 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 1cc301c6-e01e-0071-6b8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093836Z-r154656d9bclprr71vn2nvcemn0000000s100000000004n6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49760	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:36 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1cc301ca-e01e-0071-6f8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093836Z-1767f7688dcrppb7pkfhksct680000000rn0000000005ex5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49762	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:36 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:36 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 53b222f3-a01e-0098-419e-158556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093836Z-r154656d9bcwbfnhhnwdxge6u00000000660000000009f3p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:36 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49761	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:36 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:36 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 53cb037b-d01e-002b-6f04-1825fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093836Z-r154656d9bcp2td5zh846myygg0000000rv0000000009guv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49765	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:37 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:37 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:37 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 77844cee-a01e-0032-35c7-171949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093837Z-r154656d9bcpnqc46yk454phh800000003q00000000005ks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:37 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49766	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:37 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: dae66c3e-d01e-0066-08a4-15ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093837Z-1767f7688dcnlss9sm3w9wbbbn0000000460000000007xc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:37 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49767	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:37 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:37 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 24b39fc0-301e-0096-298c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093837Z-r154656d9bcmxqxrqrw0qrf8hg0000000an0000000007h7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:37 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49769	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:37 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:37 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:37 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 79ade187-001e-0065-788c-150b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093837Z-r154656d9bclhnqxthdkb0ps8000000007u0000000008m4y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:37 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49768	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:37 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:37 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 348a4018-801e-0078-54c7-17bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093837Z-1767f7688dccnqqfuv6uyx4er000000002eg000000001998 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:37 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49770	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:38 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 39 58 36 49 35 6c 46 38 73 6b 43 65 37 52 38 62 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 34 63 63 39 31 31 32 31 66 37 36 64 38 65 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 9X6I5lF8skCe7R8b.1Context: 24cc91121f76d8e5
2024-10-07 09:38:38 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-07 09:38:38 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 39 58 36 49 35 6c 46 38 73 6b 43 65 37 52 38 62 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 34 63 63 39 31 31 32 31 66 37 36 64 38 65 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 46 70 63 38 34 47 6f 5a 78 67 48 33 43 38 46 36 53 59 32 4d 4d 4c 45 64 4f 54 32 4a 52 65 79 51 50 50 5a 38 31 41 76 4b 58 6b 61 2f 47 77 6c 63 4b 49 4b 58 56 32 5a 33 59 62 58 43 44 47 64 62 79 7a 43 74 72 74 4e 75 46 4a 46 52 71 4c 66 4b 55 32 43 46 6d 44 4a 6f 58 5a 62 79 45 62 56 42 59 5a 53 55 69 42 6a 33 78 4f 31 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 9X6I5lF8skCe7R8b.2Context: 24cc91121f76d8e5<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAeFpc84GoZxgH3C8F6SY2MMLEdOT2JReyQPPZ81AvKXka/GwlcKIKXV2Z3YbXCDGdbyzCtrtNuFJFRqLfKU2CFmDJoXZbyEbVBYZSUiBj3xO1S
2024-10-07 09:38:38 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 39 58 36 49 35 6c 46 38 73 6b 43 65 37 52 38 62 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 34 63 63 39 31 31 32 31 66 37 36 64 38 65 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 9X6I5lF8skCe7R8b.3Context: 24cc91121f76d8e5<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-07 09:38:38 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-07 09:38:38 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 68 38 63 6c 43 73 48 41 47 6b 43 4f 47 76 79 78 2b 68 4f 67 62 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: h8clCsHAGkCOGvyx+hOgbw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49774	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:38 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: eee776c4-301e-001f-2622-16aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093838Z-r154656d9bc27nzfvdqr2guqt000000001r0000000005mf3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49773	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:38 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:38 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f10c824-e01e-0085-1c8c-15c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093838Z-1767f7688dctps2t8qk28fz8yg0000000rx0000000000r3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:38 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49775	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:38 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0da94923-701e-0097-168c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093838Z-r154656d9bcn4d55dey6ma44b00000000ea000000000b44f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49777	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:38 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:38 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: bc3bb15e-601e-003d-16f8-176f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093838Z-r154656d9bcdp2lt7d5tpscfcn0000000s00000000006sbp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:38 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49776	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:38 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:38 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: f71a7e49-201e-000c-5aa4-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093838Z-1767f7688dccbx4fmf9wh4mm3c0000000rq0000000001gey x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:38 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49778	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:39 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:39 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 22e42897-601e-0070-65c7-17a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093839Z-1767f7688dcnlss9sm3w9wbbbn00000004a0000000000fsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:39 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49779	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:39 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:39 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 1e32dda0-e01e-000c-2bf8-178e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093839Z-r154656d9bczc24jcy1csnb0es000000023g00000000bhzf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:39 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49780	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:39 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:39 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: a910d2e0-401e-005b-72a6-159c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093839Z-1767f7688dcmkqgxsuwcub9gd0000000013g000000004ns9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:39 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49781	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:39 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c2ca9d4d-801e-0035-458c-15752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093839Z-r154656d9bcwd5vj3zknz7qfhc00000006z000000000cd5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49782	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:39 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:39 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: cce90406-001e-005a-059e-15c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093839Z-1767f7688dccnqqfuv6uyx4er0000000027g00000000cank x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:39 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49783	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:39 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:39 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a7623418-001e-00a2-348c-15d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093839Z-1767f7688dcsjpdx60gbb8v42g0000000b7g000000004gwd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:39 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49784	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:39 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 4b0a3852-c01e-00ad-3b8c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093839Z-r154656d9bc7mtk716cm75thbs0000000rp00000000088mc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49785	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:39 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: bf725111-501e-00a0-7c78-189d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093839Z-1767f7688dc5kg9bwc8fvfnfb40000000s2g0000000049fz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:40 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49786	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:40 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:40 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 4fef4e97-801e-007b-44c7-15e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093840Z-r154656d9bcpkd87yvea8r1dfg0000000dt000000000c2wy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:40 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49787	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:40 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:40 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: e8bdadc1-401e-0067-74c7-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093840Z-1767f7688dcvp2wzdxa8717z3000000004ag00000000cazr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:40 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49789	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:40 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:40 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: c4ad759c-701e-0001-2422-16b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093840Z-r154656d9bc94jg685tuhe75qw0000000e9000000000aga1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:40 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49790	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:40 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:40 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 0dcb6c6d-e01e-0003-668c-150fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093840Z-1767f7688dc9hz5543dfnckp1w0000000g3g0000000070t8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:40 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49791	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:40 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 8789ddbb-a01e-0084-6a8c-159ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093840Z-r154656d9bc5gm9nqxzv5c87e800000005eg000000002y0c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49792	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:40 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:40 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 9bed673a-001e-0046-278c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093840Z-1767f7688dc9s2cg0vz2a9g5ms000000011000000000cfs7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:41 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49794	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:41 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:41 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: ed9c017d-601e-000d-3e22-162618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093841Z-r154656d9bcjfw87mb0kw1h2480000000ecg000000001s50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:41 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49797	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:41 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:41 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 15fe0b87-a01e-0002-3b8c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093841Z-1767f7688dc4zx8hzkgqpgqkb400000009k000000000be13 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:41 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49796	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:41 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:41 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3a0dcc46-601e-0032-6c8c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093841Z-r154656d9bcdp2lt7d5tpscfcn0000000rw000000000dagc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:41 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49798	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:41 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:41 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 738079d0-501e-00a3-3dc7-17c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093841Z-1767f7688dcxs7gvbd5dcgxeys0000000rng000000006wza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:41 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49799	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:41 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:41 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: c54fbac1-901e-008f-588c-1567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093841Z-r154656d9bcn4d55dey6ma44b00000000eg0000000000q3f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:42 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49801	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:42 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:42 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 1513c2df-001e-0017-1f9e-150c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093842Z-1767f7688dc5std64kd3n8sca4000000089g000000008cvx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:42 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49802	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:42 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9a197f6-401e-0078-3b8c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093842Z-1767f7688dc4gvn6w3bs6a6k900000000s0g000000006fyx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49800	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:42 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:42 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 4b3baa61-c01e-00ad-4e9e-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093842Z-r154656d9bcfd2bs2ymcm7xz980000000edg000000003unc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:42 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49803	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:42 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:42 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b83a8dc4-f01e-003f-308c-15d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093842Z-r154656d9bc5gm9nqxzv5c87e800000005c0000000007y5k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:42 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49805	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:42 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 4d501e36-901e-0029-1978-18274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093842Z-1767f7688dc2kzqgyrtc6e2gp40000000rsg000000006gvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49806	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:43 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:43 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 3883747d-501e-008c-279e-15cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093843Z-r154656d9bc6kzfwvnn9vvz3c400000005f0000000008vrq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:43 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49807	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:43 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:43 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 1f480aea-c01e-002b-028c-156e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093843Z-r154656d9bc4v6bg39gwnbf5vn00000006kg0000000028c0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49808	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:43 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:43 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7be6821c-d01e-008e-398c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093843Z-r154656d9bcp2td5zh846myygg0000000rx000000000796v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:43 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49809	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:43 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:43 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 16d3a614-701e-0032-288c-15a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093843Z-1767f7688dctps2t8qk28fz8yg0000000rrg00000000b99x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:43 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49810	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:43 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:43 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: aa883537-b01e-0053-4c8c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093843Z-1767f7688dcxfh5bcu3z8cgqmn0000000s0g00000000d0dk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:43 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49811	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:43 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:43 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 7a9ad003-b01e-0053-6d8c-18cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093843Z-1767f7688dc9hz5543dfnckp1w0000000g0g00000000c0wb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:43 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49812	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:43 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:43 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 53cf1937-f01e-0096-0fc7-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093843Z-1767f7688dcdvjcfkw13t1btbs0000000s4g00000000039a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:43 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49813	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:43 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:43 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: bf719889-501e-00a0-2c78-189d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093843Z-1767f7688dc9s2cg0vz2a9g5ms000000012g000000009s17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:43 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49814	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:43 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:43 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 38660718-101e-000b-6724-185e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093843Z-r154656d9bc94jg685tuhe75qw0000000e9000000000agk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:44 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49816	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:44 UTC	720	OUT	GET /personal/daniel_andersson_blsrail_no HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: WSS_FullScreenMode=false
2024-10-07 09:38:44 UTC	2098	IN	HTTP/1.1 302 Found Content-Length: 274 Content-Type: text/html; charset=utf-8 Location: https://blsrailno-my.sharepoint.com/personal/daniel_andersson_blsrail_no/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Fdaniel%5Fandersson%5Fblsrail%5Fno P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,94,77209,0,69635,91 X-SharePointHealthScore: 3 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 548857a1-5054-a000-1242-6c1a4bd9b3cc request-id: 548857a1-5054-a000-1242-6c1a4bd9b3cc MS-CV: oVeIVFRQAKASQmwaS9mzzA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-EWR31r5d&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 66 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: A055685B05AE4AB29721BFD93E2E8077 Ref B: EWR311000108021 Ref C: 2024-10-07T09:38:44Z Date: Mon, 07 Oct 2024 09:38:44 GMT Connection: close
2024-10-07 09:38:44 UTC	274	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 6c 73 72 61 69 6c 6e 6f 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 64 61 6e 69 65 6c 5f 61 6e 64 65 72 73 73 6f 6e 5f 62 6c 73 72 61 69 6c 5f 6e 6f 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 3f 53 6f 75 72 63 65 3d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 64 61 6e 69 65 6c 25 35 46 61 6e 64 65 72 73 73 6f 6e 25 35 46 62 6c 73 72 61 69 6c 25 35 46 6e 6f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://blsrailno-my.sharepoint.com/personal/daniel_andersson_blsrail_no/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Fdaniel%5Fandersson%5Fblsrail%5Fno">here</a>.</h2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49815	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:44 UTC	805	OUT	GET /personal/daniel_andersson_blsrail_no/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Fdaniel%5Fandersson%5Fblsrail%5Fno HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: WSS_FullScreenMode=false
2024-10-07 09:38:44 UTC	1847	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 312 Content-Type: text/html; charset=utf-8 Location: /_forms/default.aspx?ReturnUrl=%2fpersonal%2fdaniel_andersson_blsrail_no%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Fdaniel%255Fandersson%255Fblsrail%255Fno&Source=cookie P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGZGFuaWVsJTVGYW5kZXJzc29uJTVGYmxzcmFpbCU1Rm5v; expires=Mon, 07-Oct-2024 09:48:44 GMT; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 4294967295,4294967295,4294967295,4294967295,4294967295,4294967295,4294967295,4294967295 X-SharePointHealthScore: 0 X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 548857a1-a065-a000-1242-6b40cede25fd request-id: 548857a1-a065-a000-1242-6b40cede25fd MS-CV: oVeIVGWgAKASQmtAzt4l/Q.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-EWR31r5a&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 31 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F6F6D693156249DCBADDF9C8A554B75A Ref B: EWR311000101045 Ref C: 2024-10-07T09:38:44Z Date: Mon, 07 Oct 2024 09:38:43 GMT Connection: close
2024-10-07 09:38:44 UTC	312	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 5f 66 6f 72 6d 73 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 66 70 65 72 73 6f 6e 61 6c 25 32 66 64 61 6e 69 65 6c 5f 61 6e 64 65 72 73 73 6f 6e 5f 62 6c 73 72 61 69 6c 5f 6e 6f 25 32 66 5f 6c 61 79 6f 75 74 73 25 32 66 31 35 25 32 66 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 25 33 66 53 6f 75 72 63 65 25 33 64 25 32 35 32 46 70 65 72 73 6f 6e 61 6c 25 32 35 32 46 64 61 6e 69 65 6c 25 32 35 35 46 61 6e 64 65 72 73 73 6f 6e 25 32 35 35 46 62 6c 73 72 61 69 6c 25 32 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/_forms/default.aspx?ReturnUrl=%2fpersonal%2fdaniel_andersson_blsrail_no%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Fdaniel%255Fandersson%255Fblsrail%2

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49817	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:44 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: be018b82-401e-0035-0c8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093844Z-1767f7688dc5std64kd3n8sca400000008ag000000006gbs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:44 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49819	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:44 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:44 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 72f765ac-101e-0017-69fb-1747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093844Z-r154656d9bcqqgssyv95384a1c0000000rvg0000000094bw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:44 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49818	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:44 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:44 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 801e2bd2-b01e-0021-6a8c-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093844Z-1767f7688dc4zx8hzkgqpgqkb400000009gg00000000duhq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:44 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49820	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:44 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:44 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 3623a01f-301e-003f-6f73-16266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093844Z-1767f7688dcxs7gvbd5dcgxeys0000000rg000000000de0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:44 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49821	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:44 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:44 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 8abd529a-301e-001f-5f78-18aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093844Z-1767f7688dc4zx8hzkgqpgqkb400000009kg000000009bd0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:44 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49823	13.107.136.10	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:45 UTC	965	OUT	GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2fdaniel_andersson_blsrail_no%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Fdaniel%255Fandersson%255Fblsrail%255Fno&Source=cookie HTTP/1.1 Host: blsrailno-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: WSS_FullScreenMode=false; RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGZGFuaWVsJTVGYW5kZXJzc29uJTVGYmxzcmFpbCU1Rm5v
2024-10-07 09:38:45 UTC	3704	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 885 Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://login.microsoftonline.com:443/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929%2DFC9B82E619AC85DFF226E757B51935B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=548857a1%2D30a5%2D9000%2Dee84%2Dd4f234c30850 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: nSGt-2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929=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; expires=Mon, 07-Oct-2024 09:42:45 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: nSGt-2AC581F4F66189B56624EEB90713A1F62C7B21E4EE706929=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly Set-Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGZGFuaWVsJTVGYW5kZXJzc29uJTVGYmxzcmFpbCU1Rm5vJlByZXZpb3VzUmVxdWVzdENvcnJlbGF0aW9uSWQ9NTQ4ODU3YTElMkQzMGE1JTJEOTAwMCUyRGVlODQlMkRkNGYyMzRjMzA4NTAmUmV0dXJuVXJsPSUyRnBlcnNvbmFsJTJGZGFuaWVsJTVGYW5kZXJzc29uJTVGYmxzcmFpbCU1Rm5vJTJGJTVGbGF5b3V0cyUyRjE1JTJGQXV0aGVudGljYXRlJTJFYXNweCUzRlNvdXJjZSUzRCUyNTJGcGVyc29uYWwlMjUyRmRhbmllbCUyNTVGYW5kZXJzc29uJTI1NUZibHNyYWlsJTI1NUZubw==; expires=Mon, 07-Oct-2024 09:48:45 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: RpsContextCookie=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly X-NetworkStatistics: 0,525568,0,0,202,0,26332,92 X-SharePointHealthScore: 3 X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 548857a1-30a5-9000-ee84-d4f234c30850 request-id: 548857a1-30a5-9000-ee84-d4f234c30850 MS-CV: oVeIVKUwAJDuhNTyNMMIUA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=166e4320-c7ce-4b31-b443-4dfab0fc7b81&destinationEndpoint=Edge-Prod-EWR31r5b&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 56 SPIisLatency: 0 Include-Referred-Token-Binding-ID: true X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25318 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 7E8CD196FCE14FE2972639F6FEA891CE Ref B: EWR311000104051 Ref C: 2024-10-07T09:38:45Z Date: Mon, 07 Oct 2024 09:38:44 GMT Connection: close
2024-10-07 09:38:45 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 3a 34 34 33 2f 31 36 36 65 34 33 32 30 2d 63 37 63 65 2d 34 62 33 31 2d 62 34 34 33 2d 34 64 66 61 62 30 66 63 37 62 38 31 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 25 35 46 69 64 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 25 35 46 6d 6f 64 65 3d 66 6f 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com:443/166e4320-c7ce-4b31-b443-4dfab0fc7b81/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=for
2024-10-07 09:38:45 UTC	419	IN	Data Raw: 33 35 42 38 31 31 31 33 30 45 34 44 33 32 41 38 38 38 33 43 36 36 35 46 34 33 30 33 44 45 37 34 38 30 45 33 26 61 6d 70 3b 72 65 64 69 72 65 63 74 25 35 46 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 62 6c 73 72 61 69 6c 6e 6f 25 32 44 6d 79 25 32 45 73 68 61 72 65 70 6f 69 6e 74 25 32 45 63 6f 6d 25 32 46 25 35 46 66 6f 72 6d 73 25 32 46 64 65 66 61 75 6c 74 25 32 45 61 73 70 78 26 61 6d 70 3b 73 74 61 74 65 3d 4f 44 30 77 26 61 6d 70 3b 63 6c 61 69 6d 73 3d 25 37 42 25 32 32 69 64 25 35 46 74 6f 6b 65 6e 25 32 32 25 33 41 25 37 42 25 32 32 78 6d 73 25 35 46 63 63 25 32 32 25 33 41 25 37 42 25 32 32 76 61 6c 75 65 73 25 32 32 25 33 41 25 35 42 25 32 32 43 50 31 25 32 32 25 35 44 25 37 44 25 37 44 25 37 44 26 61 6d 70 3b 77 73 75 63 78 74 3d 31 Data Ascii: 35B811130E4D32A8883C665F4303DE7480E3&redirect%5Furi=https%3A%2F%2Fblsrailno%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49822	13.107.253.45	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:45 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:45 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 6a902a44-301e-005d-788c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093845Z-r154656d9bcwd5vj3zknz7qfhc000000070000000000a7zg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:45 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49825	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:45 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: b1d18621-e01e-0020-19b6-15de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093845Z-1767f7688dck2l7961u6s0hrtn0000000rzg000000009s65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49824	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:45 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:45 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e1dbe94c-b01e-0021-72a4-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093845Z-r154656d9bc2dpb46dmu3uezks0000000edg000000004nvw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:45 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49826	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:45 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:45 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 360ff137-701e-0098-1c78-18395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093845Z-1767f7688dc9s2cg0vz2a9g5ms000000016g000000003ha4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:45 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49827	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:45 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:45 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 801b5ab8-801e-00ac-3319-18fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093845Z-r154656d9bctbqfcgmyvqx3k100000000e8g000000009nq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:45 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49828	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:45 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:46 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: e38dd6de-001e-0065-76c7-170b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093846Z-1767f7688dcrppb7pkfhksct680000000rf000000000dn8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49830	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:46 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 766164d5-c01e-0082-668c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093846Z-r154656d9bc27nzfvdqr2guqt000000001kg00000000bs9q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49829	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:46 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:46 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 2888ff52-c01e-008e-229c-157381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093846Z-r154656d9bcrxcdc4sxf91b6u400000008rg000000000dgn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:46 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49832	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:46 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:46 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 012726c1-901e-00a0-16c7-176a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093846Z-1767f7688dcxjm7c0w73xyx8vs0000000s30000000005hvq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49833	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:46 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:46 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: ea18a89c-b01e-001e-2d22-160214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093846Z-r154656d9bc94jg685tuhe75qw0000000ee00000000024qn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:46 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49834	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:46 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 488e22d8-201e-003c-6178-1830f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093846Z-1767f7688dcr9sxxmettbmaaq40000000ryg00000000bdxe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49835	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:46 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:46 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: d9118a4b-801e-00ac-0522-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093846Z-r154656d9bcrxcdc4sxf91b6u400000008ng000000006c1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:47 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49836	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:46 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:47 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:46 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 1cc30b66-e01e-0071-368c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093846Z-1767f7688dcsjpdx60gbb8v42g0000000b3g00000000azv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:47 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49837	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:47 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:47 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 8e9c9a52-201e-000c-6b8c-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093847Z-r154656d9bccl8jh8cxn9cxxcs0000000eb0000000009a7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:47 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49838	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:47 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:47 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0da9586c-701e-0097-318c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093847Z-1767f7688dc7zpf96gw2vqtm3c00000000h000000000347g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:47 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:47 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:47 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:47 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: b9a19cb7-401e-0078-068c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093847Z-r154656d9bcc2bdtn1pd2qfd4c0000000rxg000000003prw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:47 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:47 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:47 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:47 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: ef3d2b9b-501e-008f-674f-179054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093847Z-1767f7688dck2l7961u6s0hrtn0000000rx000000000dexh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:47 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49841	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:47 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:47 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:47 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 63ef0fe1-201e-0096-749c-15ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093847Z-r154656d9bcp2td5zh846myygg0000000s00000000001teh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:47 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49842	152.199.21.175	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:48 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:48 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5200151 Cache-Control: public, max-age=31536000 Content-MD5: bedopN8eDQBhzbUu8GNGxA== Content-Type: application/x-javascript Date: Mon, 07 Oct 2024 09:38:48 GMT Etag: 0x8DCB563C85A43C4 Last-Modified: Mon, 05 Aug 2024 15:32:14 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb594470-e01e-0006-2151-e9b2d8000000 x-ms-version: 2009-09-19 Content-Length: 141866 Connection: close
2024-10-07 09:38:48 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-07 09:38:48 UTC	16383	IN	Data Raw: 22 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 72 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 75 3d 65 28 72 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 6f 7c 7c 61 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 69 7c 7c 75 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f Data Ascii: "],["#202020"]),s=e(r,["45,50,54"],["#2d3236"]),u=e(r,["255,250,239"],["#fffaef"]);if(o\|\|a\|\|s)return"black";if(i\|\|u)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getCo
2024-10-07 09:38:48 UTC	16383	IN	Data Raw: 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 35 35 37 22 2c 50 50 5f 45 5f 4f 54 54 5f 44 41 54 41 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 33 34 38 46 22 2c 50 50 5f 45 5f 4f 54 54 5f 41 4c 52 45 41 44 59 5f 43 4f 4e 53 55 4d 45 44 3a 22 38 30 30 34 33 34 39 30 22 2c 50 50 5f 45 5f 4f 54 54 5f 49 4e 56 41 4c 49 44 5f 50 55 52 50 4f 53 45 3a 22 38 30 30 34 33 34 39 36 22 2c 50 50 5f 45 5f 50 50 53 41 5f 52 50 54 5f 4e 4f 54 4f 41 44 44 52 45 53 53 3a 22 38 30 30 34 38 31 32 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 45 53 53 5f 42 41 44 44 45 56 49 43 45 4e 41 4d 45 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e Data Ascii: _PASSWORD:"80043557",PP_E_OTT_DATA_INVALID:"8004348F",PP_E_OTT_ALREADY_CONSUMED:"80043490",PP_E_OTT_INVALID_PURPOSE:"80043496",PP_E_PPSA_RPT_NOTOADDRESS:"80048120",PP_E_STRONGPROCESS_BADDEVICENAME:"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_IN
2024-10-07 09:38:48 UTC	3	IN	Data Raw: 2e 2a 29 Data Ascii: .*)
2024-10-07 09:38:48 UTC	16383	IN	Data Raw: 3f 24 2f 5d 2c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 74 2e 63 61 6c 6c 28 6e 2c 65 5b 72 5d 2c 72 2c 65 29 7d 2c 41 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 65 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 62 3a 66 Data Ascii: ?$/],D:function(e,t,n){for(var r=0,o=e.length;r<o;r++)t.call(n,e[r],r,e)},A:"function"==typeof Array.prototype.indexOf?function(e,t){return Array.prototype.indexOf.call(e,t)}:function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},Lb:f
2024-10-07 09:38:48 UTC	16383	IN	Data Raw: 71 62 28 74 29 2c 53 2e 61 2e 41 62 28 74 2c 50 29 2c 53 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 65 72 55 70 64 61 74 65 73 26 26 53 2e 54 61 2e 64 65 66 65 72 72 65 64 28 74 2c 21 30 29 2c 74 7d 3b 76 61 72 20 50 3d 7b 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 3a 6e 2c 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 77 5d 7d 2c 78 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 73 70 65 63 74 61 74 65 22 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 29 7d 2c 79 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c Data Ascii: qb(t),S.a.Ab(t,P),S.options.deferUpdates&&S.Ta.deferred(t,!0),t};var P={equalityComparer:n,v:function(){return this[w]},xa:function(){this.notifySubscribers(this[w],"spectate"),this.notifySubscribers(this[w])},ya:function(){this.notifySubscribers(this[w],
2024-10-07 09:38:48 UTC	16383	IN	Data Raw: 6f 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 47 61 28 53 2e 75 2e 47 28 65 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 5b 6e 5d 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6f 28 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 72 29 29 3a 53 2e 61 2e 47 61 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 2c 65 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 74 29 3b 69 Data Ascii: o(e){return S.a.Ga(S.u.G(e),(function(t,n){return function(){return e()[n]}}))}function i(e,t,r){return"function"==typeof e?o(e.bind(null,t,r)):S.a.Ga(e,n)}function c(e,t){return o(this.getBindings.bind(this,e,t))}function d(e,t){var n=S.h.firstChild(t);i
2024-10-07 09:38:48 UTC	16383	IN	Data Raw: 28 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 30 2c 74 29 2c 53 2e 75 2e 47 28 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 2c 6e 75 6c 6c 2c 5b 74 5b 30 5d 2c 65 21 3d 3d 44 3f 65 3a 61 5d 29 7d 29 2c 53 2e 61 2e 65 63 28 65 2c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 26 26 28 70 3d 21 6c 26 26 69 5b 30 5d 2e 73 65 6c 65 63 74 65 64 3f 5b 53 2e 77 2e 4d 28 69 5b 30 5d 29 5d 3a 5b 5d 2c 68 3d 21 30 29 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 2c 74 3d 3d 3d 44 3f 28 53 2e 61 2e 42 62 28 72 2c 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 29 2c Data Ascii: (c=function(e,t){i(0,t),S.u.G(n.get("optionsAfterRender"),null,[t[0],e!==D?e:a])}),S.a.ec(e,f,(function(t,r,i){return i.length&&(p=!l&&i[0].selected?[S.w.M(i[0])]:[],h=!0),r=e.ownerDocument.createElement("option"),t===D?(S.a.Bb(r,n.get("optionsCaption")),
2024-10-07 09:38:48 UTC	16383	IN	Data Raw: 3b 22 7d 2c 6c 2e 74 6d 70 6c 2e 74 61 67 2e 6b 6f 5f 77 69 74 68 3d 7b 6f 70 65 6e 3a 22 77 69 74 68 28 24 31 29 20 7b 22 2c 63 6c 6f 73 65 3a 22 7d 20 22 7d 29 7d 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 53 2e 63 61 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 53 2e 24 61 3b 76 61 72 20 65 3d 6e 65 77 20 53 2e 24 61 3b 30 3c 65 2e 48 64 26 26 53 2e 67 63 28 65 29 2c 53 2e 62 28 22 6a 71 75 65 72 79 54 6d 70 6c 54 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 53 2e 24 61 29 7d 28 29 7d 29 29 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 Data Ascii: ;"},l.tmpl.tag.ko_with={open:"with($1) {",close:"} "})},S.$a.prototype=new S.ca,S.$a.prototype.constructor=S.$a;var e=new S.$a;0<e.Hd&&S.gc(e),S.b("jqueryTmplTemplateuser",S.$a)}()}))}()},function(e,t,n){function r(e){return(r="function"==typeof Symbol&
2024-10-07 09:38:48 UTC	10799	IN	Data Raw: 67 69 66 79 28 6e 29 7d 72 65 74 75 72 6e 20 74 26 26 28 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 5c 3f 2f 67 2c 22 5c 5c 75 30 30 33 46 22 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 65 2e 68 65 61 64 65 72 73 3d 62 28 29 2c 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 61 2c 65 2e 62 72 65 61 6b 43 61 63 68 65 3d 73 2c 65 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 68 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3b 69 66 28 74 29 7b 76 61 72 20 73 3d 74 2e 65 76 65 6e 74 4f 70 74 69 6f 6e 73 7c 7c 7b 7d 3b 69 66 28 73 2e 65 76 65 6e 74 49 64 3d 74 2e 65 76 65 6e 74 49 64 7c 7c 73 2e 65 76 65 6e 74 49 64 2c 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 68 69 64 69 6e 67 Data Ascii: gify(n)}return t&&(t=t.replace(/\?/g,"\\u003F")),t}function S(e){e.headers=b(),e.withCredentials=a,e.breakCache=s,e.responseType=h}function E(e,t,n,r,o,i){var a=null;if(t){var s=t.eventOptions\|\|{};if(s.eventId=t.eventId\|\|s.eventId,s.hasOwnProperty("hiding

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49843	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:48 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:48 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:48 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 7b1dd74b-e01e-0085-7ca6-15c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093848Z-r154656d9bclhnqxthdkb0ps8000000007vg000000005dhx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:48 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49844	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:48 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:48 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:48 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 0480ed94-801e-00ac-5102-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093848Z-1767f7688dcmkqgxsuwcub9gd000000001100000000094s9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:48 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49845	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:48 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:48 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:48 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 7afec079-601e-000d-468c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093848Z-r154656d9bcqqgssyv95384a1c0000000ry0000000004ma8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:48 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49846	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:48 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:48 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:48 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: eb40c01e-101e-000b-509e-155e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093848Z-r154656d9bcc4snr2sy7ntt13c0000000ba0000000004u69 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:48 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49847	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:48 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:48 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:48 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 36849978-001e-000b-119c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093848Z-r154656d9bcjpgqtzd4z33r5yn0000000e9g000000009n7n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:48 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49849	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:48 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:49 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 1392789d-401e-0047-0e8c-158597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093849Z-r154656d9bcvjnbgheqhz2uek80000000rxg000000008hs3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:49 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49848	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:48 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:49 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:49 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 6a90313a-301e-005d-1a8c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093849Z-1767f7688dcxfh5bcu3z8cgqmn0000000s5g000000005qdz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:49 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49850	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:49 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:49 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07aacdb1-401e-0083-73c7-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093849Z-1767f7688dc7zpf96gw2vqtm3c00000000eg000000002nae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:49 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49851	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:49 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:49 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:49 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7afec1f8-601e-000d-328c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093849Z-1767f7688dcnlss9sm3w9wbbbn000000044000000000auv2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:49 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49852	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:49 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:49 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 92784c80-801e-002a-088c-1531dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093849Z-r154656d9bc6m642udcg3mq41n0000000aeg0000000098mw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:49 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49858	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:49 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:49 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:49 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 4a217eb8-401e-00a3-218c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093849Z-r154656d9bccl8jh8cxn9cxxcs0000000edg000000005dw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:49 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49859	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:49 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:49 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:49 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 18b29d22-e01e-0085-0978-18c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093849Z-1767f7688dcqrzlg5y6mnvesus000000019000000000467a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:49 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49857	152.199.21.175	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:49 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:50 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5200152 Cache-Control: public, max-age=31536000 Content-MD5: bedopN8eDQBhzbUu8GNGxA== Content-Type: application/x-javascript Date: Mon, 07 Oct 2024 09:38:49 GMT Etag: 0x8DCB563C85A43C4 Last-Modified: Mon, 05 Aug 2024 15:32:14 GMT Server: ECAcc (lhc/78A8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb594470-e01e-0006-2151-e9b2d8000000 x-ms-version: 2009-09-19 Content-Length: 141866 Connection: close
2024-10-07 09:38:50 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-07 09:38:50 UTC	1	IN	Data Raw: 22 Data Ascii: "
2024-10-07 09:38:50 UTC	16383	IN	Data Raw: 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 72 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 75 3d 65 28 72 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 6f 7c 7c 61 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 69 7c 7c 75 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d Data Ascii: ],["#202020"]),s=e(r,["45,50,54"],["#2d3236"]),u=e(r,["255,250,239"],["#fffaef"]);if(o\|\|a\|\|s)return"black";if(i\|\|u)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getCom
2024-10-07 09:38:50 UTC	16383	IN	Data Raw: 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 35 35 37 22 2c 50 50 5f 45 5f 4f 54 54 5f 44 41 54 41 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 33 34 38 46 22 2c 50 50 5f 45 5f 4f 54 54 5f 41 4c 52 45 41 44 59 5f 43 4f 4e 53 55 4d 45 44 3a 22 38 30 30 34 33 34 39 30 22 2c 50 50 5f 45 5f 4f 54 54 5f 49 4e 56 41 4c 49 44 5f 50 55 52 50 4f 53 45 3a 22 38 30 30 34 33 34 39 36 22 2c 50 50 5f 45 5f 50 50 53 41 5f 52 50 54 5f 4e 4f 54 4f 41 44 44 52 45 53 53 3a 22 38 30 30 34 38 31 32 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 45 53 53 5f 42 41 44 44 45 56 49 43 45 4e 41 4d 45 3a 22 38 30 30 34 39 43 32 32 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 53 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c Data Ascii: PASSWORD:"80043557",PP_E_OTT_DATA_INVALID:"8004348F",PP_E_OTT_ALREADY_CONSUMED:"80043490",PP_E_OTT_INVALID_PURPOSE:"80043496",PP_E_PPSA_RPT_NOTOADDRESS:"80048120",PP_E_STRONGPROCESS_BADDEVICENAME:"80049C22",PP_E_INLINELOGIN_INVALID_SMS:"800434E1",PP_E_INL
2024-10-07 09:38:50 UTC	16383	IN	Data Raw: 2a 29 3f 24 2f 5d 2c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 74 2e 63 61 6c 6c 28 6e 2c 65 5b 72 5d 2c 72 2c 65 29 7d 2c 41 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 65 2c 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 4c 62 Data Ascii: *)?$/],D:function(e,t,n){for(var r=0,o=e.length;r<o;r++)t.call(n,e[r],r,e)},A:"function"==typeof Array.prototype.indexOf?function(e,t){return Array.prototype.indexOf.call(e,t)}:function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},Lb
2024-10-07 09:38:50 UTC	16383	IN	Data Raw: 6e 2e 71 62 28 74 29 2c 53 2e 61 2e 41 62 28 74 2c 50 29 2c 53 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 65 72 55 70 64 61 74 65 73 26 26 53 2e 54 61 2e 64 65 66 65 72 72 65 64 28 74 2c 21 30 29 2c 74 7d 3b 76 61 72 20 50 3d 7b 65 71 75 61 6c 69 74 79 43 6f 6d 70 61 72 65 72 3a 6e 2c 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 77 5d 7d 2c 78 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 2c 22 73 70 65 63 74 61 74 65 22 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 5d 29 7d 2c 79 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 28 74 68 69 73 5b 77 Data Ascii: n.qb(t),S.a.Ab(t,P),S.options.deferUpdates&&S.Ta.deferred(t,!0),t};var P={equalityComparer:n,v:function(){return this[w]},xa:function(){this.notifySubscribers(this[w],"spectate"),this.notifySubscribers(this[w])},ya:function(){this.notifySubscribers(this[w
2024-10-07 09:38:50 UTC	16383	IN	Data Raw: 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 47 61 28 53 2e 75 2e 47 28 65 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 5b 6e 5d 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6f 28 65 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 72 29 29 3a 53 2e 61 2e 47 61 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2e 67 65 74 42 69 6e 64 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 2c 65 2c 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 53 2e 68 2e 66 69 72 73 74 43 68 69 6c 64 28 74 29 Data Ascii: n o(e){return S.a.Ga(S.u.G(e),(function(t,n){return function(){return e()[n]}}))}function i(e,t,r){return"function"==typeof e?o(e.bind(null,t,r)):S.a.Ga(e,n)}function c(e,t){return o(this.getBindings.bind(this,e,t))}function d(e,t){var n=S.h.firstChild(t)
2024-10-07 09:38:50 UTC	5	IN	Data Raw: 26 26 28 63 3d Data Ascii: &&(c=
2024-10-07 09:38:50 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 28 30 2c 74 29 2c 53 2e 75 2e 47 28 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 2c 6e 75 6c 6c 2c 5b 74 5b 30 5d 2c 65 21 3d 3d 44 3f 65 3a 61 5d 29 7d 29 2c 53 2e 61 2e 65 63 28 65 2c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 69 2e 6c 65 6e 67 74 68 26 26 28 70 3d 21 6c 26 26 69 5b 30 5d 2e 73 65 6c 65 63 74 65 64 3f 5b 53 2e 77 2e 4d 28 69 5b 30 5d 29 5d 3a 5b 5d 2c 68 3d 21 30 29 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 2c 74 3d 3d 3d 44 3f 28 53 2e 61 2e 42 62 28 72 2c 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 29 2c 53 2e 77 Data Ascii: function(e,t){i(0,t),S.u.G(n.get("optionsAfterRender"),null,[t[0],e!==D?e:a])}),S.a.ec(e,f,(function(t,r,i){return i.length&&(p=!l&&i[0].selected?[S.w.M(i[0])]:[],h=!0),r=e.ownerDocument.createElement("option"),t===D?(S.a.Bb(r,n.get("optionsCaption")),S.w
2024-10-07 09:38:50 UTC	16383	IN	Data Raw: 2c 6c 2e 74 6d 70 6c 2e 74 61 67 2e 6b 6f 5f 77 69 74 68 3d 7b 6f 70 65 6e 3a 22 77 69 74 68 28 24 31 29 20 7b 22 2c 63 6c 6f 73 65 3a 22 7d 20 22 7d 29 7d 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 53 2e 63 61 2c 53 2e 24 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 53 2e 24 61 3b 76 61 72 20 65 3d 6e 65 77 20 53 2e 24 61 3b 30 3c 65 2e 48 64 26 26 53 2e 67 63 28 65 29 2c 53 2e 62 28 22 6a 71 75 65 72 79 54 6d 70 6c 54 65 6d 70 6c 61 74 65 45 6e 67 69 6e 65 22 2c 53 2e 24 61 29 7d 28 29 7d 29 29 7d 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 28 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 Data Ascii: ,l.tmpl.tag.ko_with={open:"with($1) {",close:"} "})},S.$a.prototype=new S.ca,S.$a.prototype.constructor=S.$a;var e=new S.$a;0<e.Hd&&S.gc(e),S.b("jqueryTmplTemplateuser",S.$a)}()}))}()},function(e,t,n){function r(e){return(r="function"==typeof Symbol&&"s

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49860	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:49 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:49 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:49 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6a90350a-301e-005d-348c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093849Z-r154656d9bcmxqxrqrw0qrf8hg0000000arg000000002k5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:49 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49861	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:49 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:50 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:50 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: ed356ac5-101e-0046-2b8c-1591b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093850Z-1767f7688dcxs7gvbd5dcgxeys0000000rng000000006x6c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:50 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49862	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:50 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:50 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 76616de5-c01e-0082-6f8c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093850Z-1767f7688dcvp2wzdxa8717z3000000004b000000000c6gf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:50 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49863	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:50 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:50 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:50 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 29534450-901e-0064-768c-15e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093850Z-1767f7688dccbx4fmf9wh4mm3c0000000rhg000000008uky x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:50 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49864	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:50 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:50 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:50 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 6ec2e3f4-801e-007b-208c-15e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093850Z-r154656d9bcn4d55dey6ma44b00000000ee0000000004evy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:50 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49865	13.107.246.45	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:50 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:50 UTC	775	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:50 GMT Content-Type: text/css Content-Length: 20414 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 03 Jul 2024 21:48:08 GMT ETag: 0x8DC9BA9D4131BFD x-ms-request-id: a995ed41-c01e-0021-33bd-169092000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241007T093850Z-1657d5bbd48brl8we3nu8cxwgn00000003g000000000dzny x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:50 UTC	15609	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-10-07 09:38:50 UTC	4805	IN	Data Raw: 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 5d 71 27 8b f1 12 Data Ascii: }h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.+76s^]q'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49868	13.107.246.45	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:50 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:50 UTC	792	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:50 GMT Content-Type: application/x-javascript Content-Length: 122193 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 01:33:09 GMT ETag: 0x8DCCC8188A08D46 x-ms-request-id: 015b66e4-901e-004e-41c0-169a61000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241007T093850Z-1657d5bbd48t66tjar5xuq22r800000003cg0000000000br x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:50 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 51 58 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 ef c8 8e 99 5b 0a 83 52 18 95 bc c0 09 a3 59 18 d9 09 8b 4b 53 f8 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsQXOix)NK7KW`G/.=[RYKS7l4i)ydY$.^@R%oJgP7(70Vj#Yi,*<zcs0I)b
2024-10-07 09:38:50 UTC	16384	IN	Data Raw: 7e fe 9d 70 17 86 b2 5a 68 c6 d8 53 99 2b af 38 61 68 21 9b ce f0 76 06 77 2f b1 8a f6 1c e0 29 00 38 c8 06 c3 b2 0a 2b df 30 39 1d 64 f6 0d 4f 7a e2 7e 34 6d 3a 9a 00 0c 34 01 08 95 1f a4 6f 71 e1 37 9b b1 78 a5 1c ea ef e8 81 02 0a d3 b1 1d 3d 65 57 f3 d1 f7 33 e7 1d 77 84 3e 5b e4 6f 88 37 0e 56 73 7f 47 df 2d 25 77 ad 3e cb 46 b1 09 fd 59 e9 9a c6 25 5e 69 86 3d a4 ea 02 54 96 92 e8 0a dd c2 1a 8f 36 b8 e8 31 2b aa 16 b9 42 96 2b 1f f5 5b f8 9d e1 36 fa d1 00 84 23 1a 82 2d d1 a8 e4 55 1d 39 d3 31 2c 3a 0c 18 07 db b4 66 53 10 09 0c e7 b8 eb e1 00 b8 8f 67 e8 6b fa e2 d9 63 2f 68 1b f4 cd 05 5f 49 5f d2 84 a2 d5 ed ad f3 4c d4 f3 44 d8 0b 44 4c 5c 78 f3 82 ab 26 01 e4 a3 c7 f5 32 bb 60 81 8c 06 67 3a 21 1f 45 b4 1c 02 ad c9 fa cc a4 dc 68 35 2a 3a ba Data Ascii: ~pZhS+8ah!vw/)8+09dOz~4m:4oq7x=eW3w>[o7VsG-%w>FY%^i=T61+B+[6#-U91,:fSgkc/h_I_LDDL\x&2`g:!Eh5*:
2024-10-07 09:38:50 UTC	16384	IN	Data Raw: 0d e2 04 ad c1 bb 90 2b c3 9b df 13 1b 27 31 62 9a df 88 b4 22 90 79 9f bc 0f 9c 27 11 fb 1f b8 72 a6 d3 af de 87 e3 dd 83 c3 37 64 0e c5 fd 5c 9d 61 05 a8 a8 c7 32 2f 55 dd 9b 53 55 9e d8 44 8b 91 7e 0a 94 60 d1 1a 25 3d 4c a7 67 62 6e 14 d4 3d c4 dd 94 09 78 03 83 b1 98 8c 98 fa 44 64 c2 09 39 8c 7b 11 12 01 b7 84 d2 68 0b 3f 42 3a 43 9e 37 ea 66 1f 11 96 d2 99 0b de 60 31 6c 06 7e 1f 60 2f e5 2b 1b 5c 43 6a dd 95 0d ee cc 69 5c a5 09 1f 25 9d b5 6c f7 bc 62 11 b4 c2 84 82 a9 45 99 57 f5 2c 9d e8 c5 38 e0 86 3e a7 79 15 8b 8b 56 aa 40 4d 64 ec bc 31 ab ab 6d 1e 6e 1b c3 dc 45 ef e1 4c 03 88 3c c8 3e b0 fe 39 35 52 5e c9 79 43 d9 d1 ca d5 54 a3 b6 ee c4 5d a8 6b 63 07 30 7d a6 73 b4 dd 65 ba 72 a1 7a df 6c a7 fe fe d6 5e 4e e4 90 95 6e 23 32 12 c4 1a 55 Data Ascii: +'1b"y'r7d\a2/USUD~`%=Lgbn=xDd9{h?B:C7f`1l~`/+\Cji\%lbEW,8>yV@Md1mnEL<>95R^yCT]kc0}serzl^Nn#2U
2024-10-07 09:38:50 UTC	16384	IN	Data Raw: ce f2 fe e8 1a b9 e3 49 f2 26 1c 0f 1f 45 ee 29 dd dd b3 30 20 25 b2 3c 1f 46 65 59 b4 27 33 de a0 d8 84 6d 8d 13 e9 7b 19 fd 2c 29 1a f9 07 fb 09 37 13 1e 81 af e3 38 d7 1a 8a bf c1 36 cf d0 b6 42 7c 9d 14 e0 d0 ef c9 18 43 4d c5 77 71 59 77 8e 86 e0 a6 ee b8 6d 25 93 bb 6e 34 d6 c5 bd 30 36 1f 71 7d 0a 29 8b 9e fd d3 20 11 52 2b a4 a9 df a3 6b 09 78 22 6a b0 e5 b4 03 2f 7f 92 e6 f1 e0 f1 f3 4d 94 b0 19 60 76 9a a7 23 28 93 76 42 3f c6 88 36 5d bb 46 a9 01 63 8f b8 42 99 64 e6 92 d1 19 60 eb 35 2a 5c 4d f2 80 57 d1 4d fa 51 56 f9 b1 c1 12 09 54 6e 43 94 2a ec a1 e3 f3 ac 01 44 68 83 84 57 8d 1f d1 6f d0 8f 2e e0 09 bd 70 82 4f 6d de 88 b3 06 4a 70 95 cf 7f 44 bc d8 56 9c 5a 0d 87 8d 74 00 d3 43 f9 aa 30 27 f7 48 f1 e7 7d 97 ec 41 df 0b ab 6f 63 6a 6a 99 Data Ascii: I&E)0 %<FeY'3m{,)786B\|CMwqYwm%n406q}) R+kx"j/M`v#(vB?6]FcBd`5\MWMQVTnCDhWo.pOmJpDVZtC0'H}Aocjj
2024-10-07 09:38:50 UTC	16384	IN	Data Raw: ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f 16 b5 36 49 01 f9 99 3e cf 46 45 9c df 70 be 0d 1e 85 fe 33 ed 87 06 bf 78 64 42 a2 03 be a2 0f 92 e1 4a 73 fa 08 1a 35 fe 39 bf 8e 9c 9a 34 94 48 08 3d 8d b1 ad 19 96 66 3b 2a ab ae 60 84 ac bf 74 3a b2 04 69 0e a4 71 ea 6c 6a f6 bc a2 fa 6a e1 19 28 41 f3 40 09 7f 2b b7 21 10 05 39 0d 1d 7c e6 ed f6 2e 69 dc 7f 12 45 d1 08 f8 1d b0 cb 41 22 66 e0 e6 cc 3b 69 60 1c 9a 87 30 93 c0 11 da 2c 85 94 58 61 06 19 8a 3d 84 c3 a8 44 19 66 35 9d e2 26 23 96 13 55 97 30 19 53 44 9b 78 fa 7c 5f ca ac 66 f2 68 83 f3 b8 08 91 50 70 67 01 e8 36 d0 56 81 59 a7 1e f1 da 42 be c7 d0 f5 cb a1 83 f4 1b 8c 78 5c 7d a4 db 2b 40 c2 64 41 45 d3 8e 38 d9 b4 4d 48 3b 4f 45 41 18 a2 c3 86 1a c5 b9 2f 25 1d b1 44 20 Data Ascii: r&XLV~ZYo6I>FEp3xdBJs594H=f;*`t:iqljj(A@+!9\|.iEA"f;i`0,Xa=Df5&#U0SDx\|_fhPpg6VYBx\}+@dAE8MH;OEA/%D
2024-10-07 09:38:50 UTC	16384	IN	Data Raw: 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 2c 70 02 11 db 98 d7 fd 90 93 9f 3a 09 d8 4d e0 fb 22 4f a2 38 08 12 4c 58 96 44 61 92 24 79 c0 c1 25 f6 d2 4d 2d a1 52 1b 24 94 3b ae 00 c5 e6 5e 62 fb 89 1b 78 18 4e 90 88 3c b0 59 76 37 ef d3 5a 67 69 ec 70 16 b9 3c 70 d5 bf be c7 38 88 2a 89 73 df 06 52 38 ee dd 1c 76 ab dd 84 86 47 64 11 b8 76 9e 81 ab 4a 3b b4 c1 29 64 ec 05 22 64 36 13 3e 8f f7 43 bc 61 9a f0 50 d8 e0 a2 b6 90 49 06 8e 0a 36 94 83 b5 63 f1 42 3f 12 c1 7e ba 89 0c ee b9 81 88 3c 96 b9 b1 0b 29 Data Ascii: Egq"IXL(abnj75M6:-O@b&^, L02\^z~"]IX,=,p:M"O8LXDa$y%M-R$;^bxN<Yv7Zgip<p8sR8vGdvJ;)d"d6>CaPI6cB?~<)
2024-10-07 09:38:50 UTC	16384	IN	Data Raw: 8f d8 ea d9 9b bf ec dc 0e b2 86 d1 dd cf 1b 69 ae d2 87 20 3b f3 54 bf dc e8 39 98 92 df 9b e9 ad fa 56 bd f6 87 4d fd d5 09 2b 7f 60 b4 19 bd 5c 57 63 fe 76 e1 f8 44 e1 4d eb 56 ce cf ca 85 e1 99 6b 46 fe fa e7 2f c7 e3 f0 f9 bc 2a 5f a6 2f 43 db cb df 2e 09 6d 93 6d fc ed 27 a8 4e 67 a6 55 fb 42 bd 32 7c f9 79 ff 5e 15 95 06 f7 79 b3 cf de f6 6c d6 2f ff de 4c d0 b2 e0 66 95 e4 1b c6 df 68 75 5a 49 b2 b6 4b 7e 29 f3 3b 45 7e 35 f5 e6 d3 86 c8 49 f5 b7 f9 e3 52 c8 e7 05 26 bd de 5c da c9 00 69 9a fb 8d 94 9f 7f 52 40 81 90 87 74 8b d8 97 a5 ff fc 53 cd cc 93 55 2e bc 7c 7d 07 9a df 99 8e ee 84 bf bf be 46 ad 7d da 44 8b bf 2a 5a 69 99 a1 14 ea 2f 0c 99 ee a4 4c cf 2a 96 cb f4 2e 3a 75 5d f5 ee aa f5 ae aa eb dd 94 bb a2 7a c9 2e 49 ce cd 95 5e fa 53 55 Data Ascii: i ;T9VM+`\WcvDMVkF/_/C.mm'NgUB2\|y^yl/LfhuZIK~);E~5IR&\iR@tSU.\|}F}DZi/L*.:u]z.I^SU
2024-10-07 09:38:51 UTC	8297	IN	Data Raw: 44 5d 0b 2d 94 1e 42 c1 d7 11 0b b1 0e 2a 15 3c 8f e9 63 3a 55 74 59 09 2e b5 00 1f e3 aa bd 03 35 07 6f 63 52 84 e7 2f 6d 92 c1 e9 10 89 6f ae 45 64 ba b3 43 a5 af 97 81 17 65 a6 74 2d 26 19 e0 80 9e a0 b0 1d df 68 09 61 20 c0 85 83 29 61 48 2a cd e5 cf 7e 0c d2 57 4b 07 9f 78 e2 49 14 5d ce 09 3e 99 f3 27 2f 6d 97 38 30 1e 7c b6 e4 cf 4e 38 0a 33 4c d5 40 bd e9 d0 e1 50 24 7f 1e c3 bf b1 06 0f 4e 81 10 48 7c 90 24 91 1b 20 ed 03 48 60 11 18 c0 df 52 33 97 8f 0d 06 a7 3c 12 12 8f 96 45 c9 f6 12 df 00 07 55 bc 63 54 71 cd 81 80 87 c9 0c c9 f0 fc 90 cd e8 24 9c df 9c 84 58 fe 14 b4 11 18 8c a3 2c 8c d0 3b 09 05 72 21 3d 3f 79 c2 e0 8a 58 f5 91 88 53 0a 1e 03 57 fb 24 b5 72 e2 fb 78 24 c9 09 e7 35 b1 e3 10 7d 02 b4 2b ba f2 ef 43 7b 99 5e 89 cc e2 2f b4 19 Data Ascii: D]-B<c:UtY.5ocR/moEdCet-&ha )aH~WKxI]>'/m80\|N83L@P$NH\|$ H`R3<EUcTq$X,;r!=?yXSW$rx$5}+C{^/

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49866	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:50 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:50 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 2fb43ddb-b01e-0070-339e-151cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093850Z-1767f7688dc97m2se6u6hv466400000007mg00000000ak7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:50 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49867	13.107.246.45	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:50 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:50 UTC	791	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:50 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: 53b33480-d01e-0009-4dfb-16b928000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241007T093850Z-1657d5bbd482tlqpvyz9e93p5400000003ag000000009qun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:50 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-07 09:38:50 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49870	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:50 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:50 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 704395e8-201e-005d-718c-15afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093850Z-r154656d9bcfd2bs2ymcm7xz980000000ee0000000002qt4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:50 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49872	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:51 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:51 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:51 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 8be9c1e7-301e-0052-678c-1565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093851Z-r154656d9bcc2bdtn1pd2qfd4c0000000ryg000000001vpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:51 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49871	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:51 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6c 6e 47 4b 71 6d 61 4e 30 6b 47 33 49 48 63 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 36 64 39 35 31 62 37 36 61 34 61 64 65 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: lnGKqmaN0kG3IHc6.1Context: 3b6d951b76a4adec
2024-10-07 09:38:51 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-07 09:38:51 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6c 6e 47 4b 71 6d 61 4e 30 6b 47 33 49 48 63 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 36 64 39 35 31 62 37 36 61 34 61 64 65 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 65 46 70 63 38 34 47 6f 5a 78 67 48 33 43 38 46 36 53 59 32 4d 4d 4c 45 64 4f 54 32 4a 52 65 79 51 50 50 5a 38 31 41 76 4b 58 6b 61 2f 47 77 6c 63 4b 49 4b 58 56 32 5a 33 59 62 58 43 44 47 64 62 79 7a 43 74 72 74 4e 75 46 4a 46 52 71 4c 66 4b 55 32 43 46 6d 44 4a 6f 58 5a 62 79 45 62 56 42 59 5a 53 55 69 42 6a 33 78 4f 31 53 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: lnGKqmaN0kG3IHc6.2Context: 3b6d951b76a4adec<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAeFpc84GoZxgH3C8F6SY2MMLEdOT2JReyQPPZ81AvKXka/GwlcKIKXV2Z3YbXCDGdbyzCtrtNuFJFRqLfKU2CFmDJoXZbyEbVBYZSUiBj3xO1S
2024-10-07 09:38:51 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6c 6e 47 4b 71 6d 61 4e 30 6b 47 33 49 48 63 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 36 64 39 35 31 62 37 36 61 34 61 64 65 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: lnGKqmaN0kG3IHc6.3Context: 3b6d951b76a4adec<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-07 09:38:51 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-07 09:38:51 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 34 67 61 63 4c 7a 6c 44 77 6b 2b 2f 42 74 72 6e 56 76 67 5a 67 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 4gacLzlDwk+/BtrnVvgZgg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49873	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:51 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:51 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:51 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: dc68e902-201e-006e-0d8c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093851Z-r154656d9bczmvnbrzm0xmzrs40000000e9000000000e2zr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:51 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49874	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:51 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:51 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:51 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d5bde9b-e01e-0071-239c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093851Z-r154656d9bc4v6bg39gwnbf5vn00000006e0000000009e45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:51 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49876	13.107.246.60	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:51 UTC	429	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:51 UTC	791	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:51 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: 53b33480-d01e-0009-4dfb-16b928000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241007T093851Z-1657d5bbd48f7nlxc7n5fnfzh000000002v000000000exs1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:51 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-07 09:38:51 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49875	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:51 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:51 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:51 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 71d081b4-b01e-001e-5dc7-170214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093851Z-1767f7688dcmkqgxsuwcub9gd0000000014g000000002kpv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:51 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49877	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:51 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:51 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:51 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ba3c7a68-301e-0099-698c-156683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093851Z-1767f7688dcxfh5bcu3z8cgqmn0000000s60000000004m78 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:51 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49878	13.107.246.60	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:51 UTC	410	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:51 UTC	792	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:51 GMT Content-Type: application/x-javascript Content-Length: 122193 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 01:33:09 GMT ETag: 0x8DCCC8188A08D46 x-ms-request-id: 015b66e4-901e-004e-41c0-169a61000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241007T093851Z-1657d5bbd48t66tjar5xuq22r8000000036g00000000aqzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:51 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 51 58 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 ef c8 8e 99 5b 0a 83 52 18 95 bc c0 09 a3 59 18 d9 09 8b 4b 53 f8 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsQXOix)NK7KW`G/.=[RYKS7l4i)ydY$.^@R%oJgP7(70Vj#Yi,*<zcs0I)b
2024-10-07 09:38:51 UTC	16384	IN	Data Raw: 7e fe 9d 70 17 86 b2 5a 68 c6 d8 53 99 2b af 38 61 68 21 9b ce f0 76 06 77 2f b1 8a f6 1c e0 29 00 38 c8 06 c3 b2 0a 2b df 30 39 1d 64 f6 0d 4f 7a e2 7e 34 6d 3a 9a 00 0c 34 01 08 95 1f a4 6f 71 e1 37 9b b1 78 a5 1c ea ef e8 81 02 0a d3 b1 1d 3d 65 57 f3 d1 f7 33 e7 1d 77 84 3e 5b e4 6f 88 37 0e 56 73 7f 47 df 2d 25 77 ad 3e cb 46 b1 09 fd 59 e9 9a c6 25 5e 69 86 3d a4 ea 02 54 96 92 e8 0a dd c2 1a 8f 36 b8 e8 31 2b aa 16 b9 42 96 2b 1f f5 5b f8 9d e1 36 fa d1 00 84 23 1a 82 2d d1 a8 e4 55 1d 39 d3 31 2c 3a 0c 18 07 db b4 66 53 10 09 0c e7 b8 eb e1 00 b8 8f 67 e8 6b fa e2 d9 63 2f 68 1b f4 cd 05 5f 49 5f d2 84 a2 d5 ed ad f3 4c d4 f3 44 d8 0b 44 4c 5c 78 f3 82 ab 26 01 e4 a3 c7 f5 32 bb 60 81 8c 06 67 3a 21 1f 45 b4 1c 02 ad c9 fa cc a4 dc 68 35 2a 3a ba Data Ascii: ~pZhS+8ah!vw/)8+09dOz~4m:4oq7x=eW3w>[o7VsG-%w>FY%^i=T61+B+[6#-U91,:fSgkc/h_I_LDDL\x&2`g:!Eh5*:
2024-10-07 09:38:51 UTC	16384	IN	Data Raw: 0d e2 04 ad c1 bb 90 2b c3 9b df 13 1b 27 31 62 9a df 88 b4 22 90 79 9f bc 0f 9c 27 11 fb 1f b8 72 a6 d3 af de 87 e3 dd 83 c3 37 64 0e c5 fd 5c 9d 61 05 a8 a8 c7 32 2f 55 dd 9b 53 55 9e d8 44 8b 91 7e 0a 94 60 d1 1a 25 3d 4c a7 67 62 6e 14 d4 3d c4 dd 94 09 78 03 83 b1 98 8c 98 fa 44 64 c2 09 39 8c 7b 11 12 01 b7 84 d2 68 0b 3f 42 3a 43 9e 37 ea 66 1f 11 96 d2 99 0b de 60 31 6c 06 7e 1f 60 2f e5 2b 1b 5c 43 6a dd 95 0d ee cc 69 5c a5 09 1f 25 9d b5 6c f7 bc 62 11 b4 c2 84 82 a9 45 99 57 f5 2c 9d e8 c5 38 e0 86 3e a7 79 15 8b 8b 56 aa 40 4d 64 ec bc 31 ab ab 6d 1e 6e 1b c3 dc 45 ef e1 4c 03 88 3c c8 3e b0 fe 39 35 52 5e c9 79 43 d9 d1 ca d5 54 a3 b6 ee c4 5d a8 6b 63 07 30 7d a6 73 b4 dd 65 ba 72 a1 7a df 6c a7 fe fe d6 5e 4e e4 90 95 6e 23 32 12 c4 1a 55 Data Ascii: +'1b"y'r7d\a2/USUD~`%=Lgbn=xDd9{h?B:C7f`1l~`/+\Cji\%lbEW,8>yV@Md1mnEL<>95R^yCT]kc0}serzl^Nn#2U
2024-10-07 09:38:52 UTC	16384	IN	Data Raw: ce f2 fe e8 1a b9 e3 49 f2 26 1c 0f 1f 45 ee 29 dd dd b3 30 20 25 b2 3c 1f 46 65 59 b4 27 33 de a0 d8 84 6d 8d 13 e9 7b 19 fd 2c 29 1a f9 07 fb 09 37 13 1e 81 af e3 38 d7 1a 8a bf c1 36 cf d0 b6 42 7c 9d 14 e0 d0 ef c9 18 43 4d c5 77 71 59 77 8e 86 e0 a6 ee b8 6d 25 93 bb 6e 34 d6 c5 bd 30 36 1f 71 7d 0a 29 8b 9e fd d3 20 11 52 2b a4 a9 df a3 6b 09 78 22 6a b0 e5 b4 03 2f 7f 92 e6 f1 e0 f1 f3 4d 94 b0 19 60 76 9a a7 23 28 93 76 42 3f c6 88 36 5d bb 46 a9 01 63 8f b8 42 99 64 e6 92 d1 19 60 eb 35 2a 5c 4d f2 80 57 d1 4d fa 51 56 f9 b1 c1 12 09 54 6e 43 94 2a ec a1 e3 f3 ac 01 44 68 83 84 57 8d 1f d1 6f d0 8f 2e e0 09 bd 70 82 4f 6d de 88 b3 06 4a 70 95 cf 7f 44 bc d8 56 9c 5a 0d 87 8d 74 00 d3 43 f9 aa 30 27 f7 48 f1 e7 7d 97 ec 41 df 0b ab 6f 63 6a 6a 99 Data Ascii: I&E)0 %<FeY'3m{,)786B\|CMwqYwm%n406q}) R+kx"j/M`v#(vB?6]FcBd`5\MWMQVTnCDhWo.pOmJpDVZtC0'H}Aocjj
2024-10-07 09:38:52 UTC	16384	IN	Data Raw: ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f 16 b5 36 49 01 f9 99 3e cf 46 45 9c df 70 be 0d 1e 85 fe 33 ed 87 06 bf 78 64 42 a2 03 be a2 0f 92 e1 4a 73 fa 08 1a 35 fe 39 bf 8e 9c 9a 34 94 48 08 3d 8d b1 ad 19 96 66 3b 2a ab ae 60 84 ac bf 74 3a b2 04 69 0e a4 71 ea 6c 6a f6 bc a2 fa 6a e1 19 28 41 f3 40 09 7f 2b b7 21 10 05 39 0d 1d 7c e6 ed f6 2e 69 dc 7f 12 45 d1 08 f8 1d b0 cb 41 22 66 e0 e6 cc 3b 69 60 1c 9a 87 30 93 c0 11 da 2c 85 94 58 61 06 19 8a 3d 84 c3 a8 44 19 66 35 9d e2 26 23 96 13 55 97 30 19 53 44 9b 78 fa 7c 5f ca ac 66 f2 68 83 f3 b8 08 91 50 70 67 01 e8 36 d0 56 81 59 a7 1e f1 da 42 be c7 d0 f5 cb a1 83 f4 1b 8c 78 5c 7d a4 db 2b 40 c2 64 41 45 d3 8e 38 d9 b4 4d 48 3b 4f 45 41 18 a2 c3 86 1a c5 b9 2f 25 1d b1 44 20 Data Ascii: r&XLV~ZYo6I>FEp3xdBJs594H=f;*`t:iqljj(A@+!9\|.iEA"f;i`0,Xa=Df5&#U0SDx\|_fhPpg6VYBx\}+@dAE8MH;OEA/%D
2024-10-07 09:38:52 UTC	16384	IN	Data Raw: 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 2c 70 02 11 db 98 d7 fd 90 93 9f 3a 09 d8 4d e0 fb 22 4f a2 38 08 12 4c 58 96 44 61 92 24 79 c0 c1 25 f6 d2 4d 2d a1 52 1b 24 94 3b ae 00 c5 e6 5e 62 fb 89 1b 78 18 4e 90 88 3c b0 59 76 37 ef d3 5a 67 69 ec 70 16 b9 3c 70 d5 bf be c7 38 88 2a 89 73 df 06 52 38 ee dd 1c 76 ab dd 84 86 47 64 11 b8 76 9e 81 ab 4a 3b b4 c1 29 64 ec 05 22 64 36 13 3e 8f f7 43 bc 61 9a f0 50 d8 e0 a2 b6 90 49 06 8e 0a 36 94 83 b5 63 f1 42 3f 12 c1 7e ba 89 0c ee b9 81 88 3c 96 b9 b1 0b 29 Data Ascii: Egq"IXL(abnj75M6:-O@b&^, L02\^z~"]IX,=,p:M"O8LXDa$y%M-R$;^bxN<Yv7Zgip<p8sR8vGdvJ;)d"d6>CaPI6cB?~<)
2024-10-07 09:38:52 UTC	16384	IN	Data Raw: 8f d8 ea d9 9b bf ec dc 0e b2 86 d1 dd cf 1b 69 ae d2 87 20 3b f3 54 bf dc e8 39 98 92 df 9b e9 ad fa 56 bd f6 87 4d fd d5 09 2b 7f 60 b4 19 bd 5c 57 63 fe 76 e1 f8 44 e1 4d eb 56 ce cf ca 85 e1 99 6b 46 fe fa e7 2f c7 e3 f0 f9 bc 2a 5f a6 2f 43 db cb df 2e 09 6d 93 6d fc ed 27 a8 4e 67 a6 55 fb 42 bd 32 7c f9 79 ff 5e 15 95 06 f7 79 b3 cf de f6 6c d6 2f ff de 4c d0 b2 e0 66 95 e4 1b c6 df 68 75 5a 49 b2 b6 4b 7e 29 f3 3b 45 7e 35 f5 e6 d3 86 c8 49 f5 b7 f9 e3 52 c8 e7 05 26 bd de 5c da c9 00 69 9a fb 8d 94 9f 7f 52 40 81 90 87 74 8b d8 97 a5 ff fc 53 cd cc 93 55 2e bc 7c 7d 07 9a df 99 8e ee 84 bf bf be 46 ad 7d da 44 8b bf 2a 5a 69 99 a1 14 ea 2f 0c 99 ee a4 4c cf 2a 96 cb f4 2e 3a 75 5d f5 ee aa f5 ae aa eb dd 94 bb a2 7a c9 2e 49 ce cd 95 5e fa 53 55 Data Ascii: i ;T9VM+`\WcvDMVkF/_/C.mm'NgUB2\|y^yl/LfhuZIK~);E~5IR&\iR@tSU.\|}F}DZi/L*.:u]z.I^SU
2024-10-07 09:38:52 UTC	8297	IN	Data Raw: 44 5d 0b 2d 94 1e 42 c1 d7 11 0b b1 0e 2a 15 3c 8f e9 63 3a 55 74 59 09 2e b5 00 1f e3 aa bd 03 35 07 6f 63 52 84 e7 2f 6d 92 c1 e9 10 89 6f ae 45 64 ba b3 43 a5 af 97 81 17 65 a6 74 2d 26 19 e0 80 9e a0 b0 1d df 68 09 61 20 c0 85 83 29 61 48 2a cd e5 cf 7e 0c d2 57 4b 07 9f 78 e2 49 14 5d ce 09 3e 99 f3 27 2f 6d 97 38 30 1e 7c b6 e4 cf 4e 38 0a 33 4c d5 40 bd e9 d0 e1 50 24 7f 1e c3 bf b1 06 0f 4e 81 10 48 7c 90 24 91 1b 20 ed 03 48 60 11 18 c0 df 52 33 97 8f 0d 06 a7 3c 12 12 8f 96 45 c9 f6 12 df 00 07 55 bc 63 54 71 cd 81 80 87 c9 0c c9 f0 fc 90 cd e8 24 9c df 9c 84 58 fe 14 b4 11 18 8c a3 2c 8c d0 3b 09 05 72 21 3d 3f 79 c2 e0 8a 58 f5 91 88 53 0a 1e 03 57 fb 24 b5 72 e2 fb 78 24 c9 09 e7 35 b1 e3 10 7d 02 b4 2b ba f2 ef 43 7b 99 5e 89 cc e2 2f b4 19 Data Ascii: D]-B<c:UtY.5ocR/moEdCet-&ha )aH~WKxI]>'/m80\|N83L@P$NH\|$ H`R3<EUcTq$X,;r!=?yXSW$rx$5}+C{^/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49880	13.107.246.45	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:51 UTC	649	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:51 UTC	738	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:51 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: ad567bd4-201e-0022-48bf-1639e4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241007T093851Z-1657d5bbd48cpbzgkvtewk0wu0000000039000000000ewgv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:51 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-07 09:38:51 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49879	13.107.246.45	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:51 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:51 UTC	792	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:51 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 79f19b76-201e-004b-80d6-1648ba000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241007T093851Z-1657d5bbd48vhs7r2p1ky7cs5w00000003kg0000000090tr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:51 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-07 09:38:51 UTC	16384	IN	Data Raw: 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 ae d0 47 c2 99 47 5b 6a a1 db c9 ce 2d d0 71 08 5a 64 11 58 a4 Data Ascii: Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUFGG[j-qZdX
2024-10-07 09:38:51 UTC	16384	IN	Data Raw: 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 5e a0 b7 cf f0 f1 eb 15 f7 97 49 1a 67 29 5a 32 4a cf 61 c8 54 Data Ascii: i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9^Ig)Z2JaT
2024-10-07 09:38:52 UTC	16384	IN	Data Raw: c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 22 bf 58 45 07 fb 68 b5 36 b5 cb 52 b6 2d b7 eb c7 d3 70 f8 10 Data Ascii: juh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7"XEh6R-p
2024-10-07 09:38:52 UTC	16384	IN	Data Raw: b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 02 d4 b7 02 3a c1 61 cd 3d bd 16 ca 31 da 5e 8c 95 df 45 cb 01 Data Ascii: ^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{:a=1^E
2024-10-07 09:38:52 UTC	16384	IN	Data Raw: 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 b4 02 92 4b d5 b1 75 17 96 0e b3 72 50 0e 90 16 c6 12 14 96 41 Data Ascii: ojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$sKurPA

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49881	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:51 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:52 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a1759df9-d01e-007a-08c7-17f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093852Z-r154656d9bc8glqfu2duqg0z1w00000001b000000000cqzk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:52 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49855	152.199.21.175	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:52 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:52 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4486030 Cache-Control: public, max-age=31536000 Content-MD5: LT++1t3XGfzBv7UAthL87A== Content-Type: application/x-javascript Date: Mon, 07 Oct 2024 09:38:52 GMT Etag: 0x8DCBD52F37806EC Last-Modified: Thu, 15 Aug 2024 17:51:54 GMT Server: ECAcc (lhc/7888) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 10a7d1b4-001e-005d-7bcf-ef5e4a000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-10-07 09:38:52 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-07 09:38:52 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-10-07 09:38:52 UTC	16383	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e Data Ascii: =Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(537);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var n
2024-10-07 09:38:52 UTC	16383	IN	Data Raw: 31 7d 29 2c 65 7d 28 72 28 36 38 32 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 Data Ascii: 1}),e}(r(682));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule
2024-10-07 09:38:52 UTC	2	IN	Data Raw: 22 21 Data Ascii: "!
2024-10-07 09:38:52 UTC	16383	IN	Data Raw: 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 22 3a Data Ascii: =typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary":
2024-10-07 09:38:52 UTC	1	IN	Data Raw: 66 Data Ascii: f
2024-10-07 09:38:52 UTC	16383	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d 3d 33 29 Data Ascii: unction N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-=3)
2024-10-07 09:38:52 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-10-07 09:38:52 UTC	16383	IN	Data Raw: 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 70 Data Ascii: r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(t,"p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49886	13.107.246.60	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:52 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:52 UTC	738	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:52 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: ad567bd4-201e-0022-48bf-1639e4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241007T093852Z-1657d5bbd487nf59mzf5b3gk8n00000002x0000000008ng5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:52 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-07 09:38:52 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49882	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:52 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:52 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0964379-001e-0049-4678-185bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093852Z-1767f7688dcr9sxxmettbmaaq40000000s4g000000000gnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:52 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49883	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:52 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 819d4321-f01e-0020-6e8c-15956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093852Z-r154656d9bczmvnbrzm0xmzrs40000000ecg000000007f10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:52 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49885	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:52 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:52 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:52 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: d7121701-c01e-000b-09c7-17e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093852Z-r154656d9bcgk58qzsfr5pfzg40000000rzg0000000042yw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:52 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49884	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:52 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:52 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:52 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 0ac1196c-201e-00aa-6778-183928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093852Z-1767f7688dc7zpf96gw2vqtm3c00000000fg000000002bdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:52 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49889	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:53 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:53 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 8a56303a-c01e-0066-0f01-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093853Z-1767f7688dc2kzqgyrtc6e2gp40000000rng00000000ctht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49887	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:53 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:53 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:53 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7585955c-001e-000b-518c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093853Z-r154656d9bcdp2lt7d5tpscfcn0000000rxg00000000a9mk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:53 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49890	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:53 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:53 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:53 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: a68e0dd8-f01e-0052-1d8c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093853Z-r154656d9bczbzfnyr5sz58vdw0000000ee0000000002pz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:53 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49891	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:53 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:53 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:53 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 757cff4f-401e-000a-528c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093853Z-1767f7688dc9s2cg0vz2a9g5ms000000010g00000000d6by x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:53 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49888	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:53 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 09:38:53 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 89fd357a-501e-008f-758c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T093853Z-1767f7688dc9hz5543dfnckp1w0000000g50000000004amm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	49894	13.107.246.45	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:54 UTC	662	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:54 UTC	799	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:54 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 4b81eb21-701e-000b-53ad-164f82000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241007T093854Z-1657d5bbd48brl8we3nu8cxwgn00000003kg00000000ac2n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 09:38:54 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49892	13.107.246.45	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:54 UTC	663	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:54 UTC	800	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:54 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 282afdf8-101e-0032-7cd3-16b49e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241007T093854Z-1657d5bbd48vhs7r2p1ky7cs5w00000003fg00000000f2s7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:54 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49893	13.107.246.45	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:54 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:54 UTC	799	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:54 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: bb555e3e-f01e-006c-4bf3-16176c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241007T093854Z-1657d5bbd487nf59mzf5b3gk8n00000002xg0000000086c4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:54 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49896	13.107.246.45	443	4620	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 09:38:54 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 09:38:54 UTC	812	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 09:38:54 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: 84e8f736-c01e-0031-5bf0-1655fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241007T093854Z-1657d5bbd48f7nlxc7n5fnfzh000000002yg000000007m2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 09:38:54 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-07 09:38:54 UTC	16384	IN	Data Raw: 19 bb cd 17 f0 ef de f3 f6 f9 b2 b5 d7 7c 4e 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c Data Ascii: \|N6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x
2024-10-07 09:38:54 UTC	3212	IN	Data Raw: 38 5d 1d 96 55 52 b0 ee 65 51 a5 80 82 a6 5f a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 Data Ascii: 8]UReQ_-av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x

Target ID:	0
Start time:	05:38:22
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:38:27
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2220,i,8475028246359423345,6197998057522107112,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:38:30
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Windows Analysis Report
https://blsrailno-my.sharepoint.com/:o:/g/personal/daniel_andersson_blsrail_no/EjzFEgOMTgBKnYxtWO8oLQUBHIsec7xcMQvme25w3MiZtg?e=WzauSK