Edit tour

Windows Analysis Report
https://github.com/terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-windows-amd64.zip

Overview

General Information

Sample URL:	https://github.com/terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-windows-amd64.zip
Analysis ID:	1528037
Infos:

Detection

Score:	24
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Downloads suspicious files via Chrome

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected suspicious crossdomain redirect

Drops PE files

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5940 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2044,i,879850001711432955,9733008339987570398,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

unarchiver.exe (PID: 6704 cmdline: "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip" MD5: 16FF3CC6CC330A08EED70CBC1D35F5D2)

7za.exe (PID: 6752 cmdline: "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\lshlpu2r.eym" "C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip" MD5: 77E556CDFDC5C592F5C46DB4127C6F4C)

conhost.exe (PID: 6768 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 6608 cmdline: "cmd.exe" /C "C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 6800 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

terraform-docs.exe (PID: 6612 cmdline: C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe MD5: 535493301BD9D97316DA66C0750E6167)

chrome.exe (PID: 6428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://github.com/terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-windows-amd64.zip" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: C:\Windows\SysWOW64\unarchiver.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49911 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: github.com to https://objects.githubusercontent.com/github-production-release-asset-2e65be/60978152/8177ff65-eabf-4864-ae34-9164f71dcf5a?x-amz-algorithm=aws4-hmac-sha256&x-amz-credential=releaseassetproduction%2f20241007%2fus-east-1%2fs3%2faws4_request&x-amz-date=20241007t123146z&x-amz-expires=300&x-amz-signature=c55c6266b316e9431b9245ec62a2d4766f22b4c892914ef8c77150f1c7ce4cc1&x-amz-signedheaders=host&response-content-disposition=attachment%3b%20filename%3dterraform-docs-v0.19.0-windows-amd64.zip&response-content-type=application%2foctet-stream

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-windows-amd64.zip HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/60978152/8177ff65-eabf-4864-ae34-9164f71dcf5a?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241007%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241007T123146Z&X-Amz-Expires=300&X-Amz-Signature=c55c6266b316e9431b9245ec62a2d4766f22b4c892914ef8c77150f1c7ce4cc1&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dterraform-docs-v0.19.0-windows-amd64.zip&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com

Source: README.md.6.dr	String found in binary or memory: https://brew.sh
Source: README.md.6.dr	String found in binary or memory: https://codecov.io/gh/terraform-docs/terraform-docs)
Source: README.md.6.dr	String found in binary or memory: https://codecov.io/gh/terraform-docs/terraform-docs/branch/master/graph/badge.svg)
Source: terraform-docs.exe, 0000000A.00000000.1879259020.0000000000963000.00000002.00000001.01000000.00000008.sdmp, terraform-docs.exe.6.dr	String found in binary or memory: https://github.com/spf13/cobra/issues/1279
Source: terraform-docs.exe, 0000000A.00000000.1879259020.0000000000963000.00000002.00000001.01000000.00000008.sdmp, terraform-docs.exe.6.dr	String found in binary or memory: https://github.com/spf13/cobra/issues/1508
Source: README.md.6.dr	String found in binary or memory: https://github.com/terraform-docs/gh-actions
Source: README.md.6.dr	String found in binary or memory: https://github.com/terraform-docs/scoop-bucket
Source: README.md.6.dr	String found in binary or memory: https://github.com/terraform-docs/terraform-docs
Source: README.md.6.dr	String found in binary or memory: https://github.com/terraform-docs/terraform-docs/actions)
Source: README.md.6.dr	String found in binary or memory: https://github.com/terraform-docs/terraform-docs/blob/master/LICENSE)
Source: README.md.6.dr	String found in binary or memory: https://github.com/terraform-docs/terraform-docs/releases
Source: README.md.6.dr	String found in binary or memory: https://github.com/terraform-docs/terraform-docs/releases)
Source: README.md.6.dr	String found in binary or memory: https://github.com/terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-$(
Source: README.md.6.dr	String found in binary or memory: https://github.com/terraform-docs/terraform-docs/workflows/ci/badge.svg)
Source: README.md.6.dr	String found in binary or memory: https://github.com/terraform-docs/tfdocs-format-template
Source: README.md.6.dr	String found in binary or memory: https://golang.org/doc/code.html#GOPATH
Source: README.md.6.dr	String found in binary or memory: https://goreportcard.com/badge/github.com/terraform-docs/terraform-docs)
Source: README.md.6.dr	String found in binary or memory: https://goreportcard.com/report/github.com/terraform-docs/terraform-docs)
Source: README.md.6.dr	String found in binary or memory: https://img.shields.io/github/license/terraform-docs/terraform-docs)
Source: README.md.6.dr	String found in binary or memory: https://img.shields.io/github/v/release/terraform-docs/terraform-docs)
Source: README.md.6.dr	String found in binary or memory: https://pkg.go.dev/badge/github.com/terraform-docs/terraform-docs)
Source: README.md.6.dr	String found in binary or memory: https://pkg.go.dev/github.com/terraform-docs/terraform-docs)
Source: README.md.6.dr	String found in binary or memory: https://pkg.go.dev/github.com/terraform-docs/terraform-docs/terraform#Module
Source: README.md.6.dr	String found in binary or memory: https://pre-commit.com/#install
Source: README.md.6.dr	String found in binary or memory: https://scoop.sh/
Source: README.md.6.dr	String found in binary or memory: https://slack.terraform-docs.io/
Source: README.md.6.dr	String found in binary or memory: https://terraform-docs.io/
Source: README.md.6.dr	String found in binary or memory: https://terraform-docs.io/reference/terraform-docs/
Source: README.md.6.dr	String found in binary or memory: https://terraform-docs.io/user-guide/configuration/
Source: README.md.6.dr	String found in binary or memory: https://terraform-docs.io/user-guide/configuration/content/
Source: README.md.6.dr	String found in binary or memory: https://terraform-docs.io/user-guide/configuration/formatter/
Source: README.md.6.dr	String found in binary or memory: https://terraform-docs.io/user-guide/configuration/output/
Source: README.md.6.dr	String found in binary or memory: https://terraform-docs.io/user-guide/introduction/
Source: README.md.6.dr	String found in binary or memory: https://www.chocolatey.org

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49911 version: TLS 1.2

System Summary

Downloads suspicious files via Chrome

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File dump: C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip (copy)

Jump to dropped file

Source: terraform-docs.exe.6.dr	Binary string: Unsupported block typeInvalid start of valuecty.IndexStep{Key:%#v}invalid primitive typevalue is not an objectsha3: Write after Readzero length BIT STRINGmismatched ELF versioninvalid section offsetbad section name index in record at byte %#xtoo many load commandsBalancerAttributes: %v[client-transport %p] received invalid frame[server-transport %p] GRPC_BINARY_LOG_FILTERinvalid config: %q, %vgzip: invalid checksumjava_string_check_utf8php_metadata_namespaceunknown parent type %Thpack: string too longheader field %q = %q%sidna: invalid label %qCloseCurlyDoubleQuote;DoubleContourIntegral;FilledVerySmallSquare;NegativeVeryThinSpace;NotPrecedesSlantEqual;NotRightTriangleEqual;NotSucceedsSlantEqual;invalid urn prefix: %q\Device\NamedPipe\msysbool value is requiredunterminated literal 'illegal UTF-8 encodingcomment not terminatedheredoc not terminatedliteral not terminatedzlib: invalid checksumHuffman count overflowliteral size too largeinvalid empty type URLunexpected length codeoneof type already setXXX_InternalExtensionsFIELD_PRESENCE_UNKNOWNbytes,1002,opt,name=goinvalid UTF-8 detectedinclude the main moduleoutput to file method [DestroyEnvironmentBlockindex out of range [%x]ReadMemStatsSlow (test)runtimecontentionstackschan receive (nil chan)garbage collection scanmakechan: bad alignmentclose of closed channel) must be a power of 2
Source: terraform-docs.exe.6.dr	Binary string: invalid pattern syntax: 116415321826934814453125582076609134674072265625reflect.StructOf: field reflect.MapIter.SetValuereflect.Value.SetComplexreflect.Value.UnsafeAddrexpected float; found %sMalformed constraint: %sWhile parsing config: %sexec: Stdout already setexec: Stderr already setPLUGIN_UNIX_SOCKET_GROUPUnknown address type: %sfailed to copy all bytes2006-01-02T15:04:05-07002006-01-02 15:04:05Z0700Mon Jan _2 15:04:05 2006unable to parse date: %sresult must be a pointer%s: unsupported type: %sjson: unsupported type: duplicate %TAG directiveread handler must be setexceeded max depth of %dwhile scanning an anchorrpc: can't find service non-empty decoder bufferencodeArray: nil elementaddress string too shortresource length too longunpacking Question.Classerror decrypting messagecertificate unobtainableTLS_RSA_WITH_RC4_128_SHAtls: server rejected ECHx509: malformed validityNested channel(id:%d) %sMalformed method name %qunexpected mantissa baseunexpected exponent baseRat.Scan: invalid syntaxinvalid protocol versionconnection write timeoutbacklog must be positivetext/html; charset=utf-8invalid pseudo-header %qframe_headers_prio_shortapplication/octet-streamRequest Entity Too LargestreamSafe was not resetValue kind is %s, not %s_html_template_urlfilteron range loop re-entry: at range loop continue: application/x-ecmascriptapplication/x-javascriptAllocateAndInitializeSidBuildSecurityDescriptorWAssignProcessToJobObjectGenerateConsoleCtrlEventGetMaximumProcessorCountGetNamedPipeHandleStateWSetConsoleCursorPositionSetDefaultDllDirectoriesNtQuerySystemInformationSetupDiCreateDeviceInfoWSetupDiGetSelectedDeviceSetupDiSetSelectedDeviceGetWindowThreadProcessId(\$)(\{?([A-Z0-9_]+)\}?)ErrorHandler should exitfirst-run-pen-experiencemicrosoft.windows.camerams-settings-airplanemodems-settings-cloudstoragegenSelfSignedCertWithKey@&%?,=[]_:-+*$#!'^~;()/.Call to unknown functionIncorrect condition typeInvalid block definitionMissing open parenthesisInvalid 'for' expressionTrailing comma in objectcannot JSON-serialize %sunsupported attribute %qinvalid type descriptioncty.GetAttrStep{Name:%q}Length on non-tuple Typerefining %#v to be > %#vrefining %#v to be < %#vwrapVal is not a pointercty.CapsuleVal(%#v, %#v)NumberLowerBound for %#vNumberUpperBound for %#vLengthLowerBound for %#vLengthUpperBound for %#vunknown compression typecode: %s, debug data: %qCannot read freed bufferCannot free freed bufferinvalid argument to Intnidna: disallowed rune %UNotNestedGreaterGreater;expected: STRING got: %sneed a character after \Invalid Semantic Version\Device\NamedPipe\cygwinattribute %q is requiredstring value is requirednumber value is requiredThe string to transform.duplicate column name %qStdlen returned an errorexpected '/' for commentGODEBUG sys/cpu: value "", required CPU feature

Source: classification engine

Classification label: sus24.win@27/9@6/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\aa6327d2-dd0f-4b5a-a9bb-eccfcc8f59a4.tmp

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6800:120:WilError_03
Source: C:\Windows\SysWOW64\unarchiver.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6768:120:WilError_03

Source: C:\Windows\SysWOW64\unarchiver.exe

File created: C:\Users\user\AppData\Local\Temp\unarchiver.log

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2044,i,879850001711432955,9733008339987570398,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://github.com/terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-windows-amd64.zip"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\SysWOW64\unarchiver.exe "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip"
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\lshlpu2r.eym" "C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip"
Source: C:\Windows\SysWOW64\7za.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\cmd.exe "cmd.exe" /C "C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2044,i,879850001711432955,9733008339987570398,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\SysWOW64\unarchiver.exe "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\lshlpu2r.eym" "C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip"	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\cmd.exe "cmd.exe" /C "C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\7za.exe	Section loaded: 7z.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe	Section loaded: umpdc.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\unarchiver.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Source: terraform-docs.exe.6.dr	Static PE information: section name: .xdata
Source: terraform-docs.exe.6.dr	Static PE information: section name: .symtab

Source: C:\Windows\SysWOW64\7za.exe

File created: C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe

Jump to dropped file

Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 1410000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 3280000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 5280000 memory commit \| memory reserve \| memory write watch	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe TID: 6728

Thread sleep time: -922337203685477s >= -30000s

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Code function: 5_2_0134B1D6 GetSystemInfo,

5_2_0134B1D6

Source: C:\Windows\SysWOW64\unarchiver.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: terraform-docs.exe, 0000000A.00000002.1896308509.000001E7F4182000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\lshlpu2r.eym" "C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip"	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\cmd.exe "cmd.exe" /C "C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe	Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe VolumeInformation			Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 Disable or Modify Tools	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	31 Virtualization/Sandbox Evasion	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 Process Injection	NTDS	13 System Information Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe	0%	ReversingLabs

Name	IP	Active	Malicious	Reputation
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
github.com	140.82.121.3	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
objects.githubusercontent.com	185.199.109.133	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://github.com/terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-windows-amd64.zip	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.chocolatey.org	README.md.6.dr	false	unknown
https://slack.terraform-docs.io/	README.md.6.dr	false	unknown
https://golang.org/doc/code.html#GOPATH	README.md.6.dr	false	unknown
https://codecov.io/gh/terraform-docs/terraform-docs/branch/master/graph/badge.svg)	README.md.6.dr	false	unknown
https://pkg.go.dev/badge/github.com/terraform-docs/terraform-docs)	README.md.6.dr	false	unknown
https://github.com/terraform-docs/gh-actions	README.md.6.dr	false	unknown
https://img.shields.io/github/license/terraform-docs/terraform-docs)	README.md.6.dr	false	unknown
https://terraform-docs.io/user-guide/configuration/formatter/	README.md.6.dr	false	unknown
https://pkg.go.dev/github.com/terraform-docs/terraform-docs)	README.md.6.dr	false	unknown
https://github.com/terraform-docs/terraform-docs/actions)	README.md.6.dr	false	unknown
https://github.com/terraform-docs/scoop-bucket	README.md.6.dr	false	unknown
https://github.com/terraform-docs/terraform-docs/blob/master/LICENSE)	README.md.6.dr	false	unknown
https://terraform-docs.io/reference/terraform-docs/	README.md.6.dr	false	unknown
https://github.com/spf13/cobra/issues/1508	terraform-docs.exe, 0000000A.00000000.1879259020.0000000000963000.00000002.00000001.01000000.00000008.sdmp, terraform-docs.exe.6.dr	false	unknown
https://github.com/terraform-docs/terraform-docs	README.md.6.dr	false	unknown
https://goreportcard.com/badge/github.com/terraform-docs/terraform-docs)	README.md.6.dr	false	unknown
https://pkg.go.dev/github.com/terraform-docs/terraform-docs/terraform#Module	README.md.6.dr	false	unknown
https://codecov.io/gh/terraform-docs/terraform-docs)	README.md.6.dr	false	unknown
https://terraform-docs.io/	README.md.6.dr	false	unknown
https://brew.sh	README.md.6.dr	false	unknown
https://github.com/terraform-docs/terraform-docs/workflows/ci/badge.svg)	README.md.6.dr	false	unknown
https://github.com/terraform-docs/tfdocs-format-template	README.md.6.dr	false	unknown
https://github.com/terraform-docs/terraform-docs/releases)	README.md.6.dr	false	unknown
https://img.shields.io/github/v/release/terraform-docs/terraform-docs)	README.md.6.dr	false	unknown
https://terraform-docs.io/user-guide/configuration/content/	README.md.6.dr	false	unknown
https://terraform-docs.io/user-guide/configuration/output/	README.md.6.dr	false	unknown
https://scoop.sh/	README.md.6.dr	false	unknown
https://goreportcard.com/report/github.com/terraform-docs/terraform-docs)	README.md.6.dr	false	unknown
https://pre-commit.com/#install	README.md.6.dr	false	unknown
https://terraform-docs.io/user-guide/configuration/	README.md.6.dr	false	unknown
https://github.com/terraform-docs/terraform-docs/releases	README.md.6.dr	false	unknown
https://github.com/terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-$(	README.md.6.dr	false	unknown
https://terraform-docs.io/user-guide/introduction/	README.md.6.dr	false	unknown
https://github.com/spf13/cobra/issues/1279	terraform-docs.exe, 0000000A.00000000.1879259020.0000000000963000.00000002.00000001.01000000.00000008.sdmp, terraform-docs.exe.6.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.199.109.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
140.82.121.3	github.com	United States	36459	GITHUBUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528037
Start date and time:	2024-10-07 14:30:43 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://github.com/terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-windows-amd64.zip
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus24.win@27/9@6/5
EGA Information:	Successful, ratio: 50%
HCA Information:	Failed

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.186.46, 108.177.15.84, 34.104.35.123, 52.149.20.212, 2.19.126.163, 2.19.126.137, 192.229.221.95, 13.95.31.18, 52.165.164.15, 142.250.184.195
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
Execution Graph export aborted for target terraform-docs.exe, PID 6612 because it is empty
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://github.com/terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-windows-amd64.zip

Process:	C:\Windows\SysWOW64\7za.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1084
Entropy (8bit):	5.102024685219329
Encrypted:	false
SSDEEP:	24:wrmJHHH0yN3gtsHw1hC09QHOsUv4eOk4/+/m3oqLFh:waJHlxE3dQHOs5exm3ogFh
MD5:	45C0E297EF7899CACC9750FD7D58F598
SHA1:	B754CF3CBA38E5443E0B453D80C81ECEF8F4ACF8
SHA-256:	5028624AE12B0D3FE193B6F6E1875D205B97A559344391F374A104C1652567E8
SHA-512:	8C01A8D42AE0B488256979E9B7AFE26A85074635BBD4CA1809A364B6C8D13DA2CD2BF4E431BB10F3561E356A961E79141EEBEEEFF034607CA4C205A1C99F0C22
Malicious:	false
Reputation:	low
Preview:	MIT License..Copyright (c) 2018 The terraform-docs Authors...Permission is hereby granted, free of charge, to any person obtaining a copy.of this software and associated documentation files (the "Software"), to deal.in the Software without restriction, including without limitation the rights.to use, copy, modify, merge, publish, distribute, sublicense, and/or sell.copies of the Software, and to permit persons to whom the Software is.furnished to do so, subject to the following conditions:..The above copyright notice and this permission notice shall be included in all.copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,.FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE.AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER.LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,.OUT

C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\README.md

Download File

Process:	C:\Windows\SysWOW64\7za.exe
File Type:	ASCII text, with very long lines (912)
Category:	dropped
Size (bytes):	12509
Entropy (8bit):	4.927060218900461
Encrypted:	false
SSDEEP:	192:cqLzjof3HTPd5IKHdF0GX2v2m7lxxsM2HwTwu+e3UD3k3M3w3x31opR93+33:dQfD0Qc22ttstQT3b00coN1olS3
MD5:	1DB42C1DE45E7B7BFB37B2DD9B2D0FA9
SHA1:	07152A3774DDFCCA624B13E56E4274D878016205
SHA-256:	3F48BE4E5779EF2035549A31F9419B46CB155AEA93473B765E876EB6D4848062
SHA-512:	8251A812F998F564A677BE21BD67B2850330550217BA2EE58F52EE7DE297912B229D81E229961282A4C3FFF0DEDC242F0BA0AC1D593330296C0381025C10B90D
Malicious:	false
Reputation:	low
Preview:	# terraform-docs..[![Build Status](https://github.com/terraform-docs/terraform-docs/workflows/ci/badge.svg)](https://github.com/terraform-docs/terraform-docs/actions) [![GoDoc](https://pkg.go.dev/badge/github.com/terraform-docs/terraform-docs)](https://pkg.go.dev/github.com/terraform-docs/terraform-docs) [![Go Report Card](https://goreportcard.com/badge/github.com/terraform-docs/terraform-docs)](https://goreportcard.com/report/github.com/terraform-docs/terraform-docs) [![Codecov Report](https://codecov.io/gh/terraform-docs/terraform-docs/branch/master/graph/badge.svg)](https://codecov.io/gh/terraform-docs/terraform-docs) [![License](https://img.shields.io/github/license/terraform-docs/terraform-docs)](https://github.com/terraform-docs/terraform-docs/blob/master/LICENSE) [![Latest release](https://img.shields.io/github/v/release/terraform-docs/terraform-docs)](https://github.com/terraform-docs/terraform-docs/releases)..![terraform-docs-teaser](./images/terraform-docs-teaser.png)..## Wha

C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe

Download File

Process:	C:\Windows\SysWOW64\7za.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	17179136
Entropy (8bit):	6.228242694783206
Encrypted:	false
SSDEEP:	98304:xl0zzwKm3zfwWxz5fs2lIYalP8WwEYWdxhyx+LYEDUy7amS5:nrjwWxz5fs2lI/l8VWo+LRpy
MD5:	535493301BD9D97316DA66C0750E6167
SHA1:	379B862238724AA61159C52C500D10B1BA5E291E
SHA-256:	DF657DA4233B8CEE82B1EA17E2E320D8C98F539DD3761B100A3823ECB01C63CD
SHA-512:	82B57A229286186699CEA60DAA11FB2B2AEC4E988D6477AA9CBDCDAAFC6656368ECA208DF0C3D3FE131B79B009CF93312FCB91B8878BE6BDCE94B254A45AAB6D
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d........ ........".......z..\................@...........................................`... .................................................>...............X................U......................................................x............................text.....z.......z................. ..`.rdata...`}..0z..b}...z.............@..@.data...P........\..................@....pdata..X...........................@..@.xdata..............................@..@.idata..>...........................@....reloc...U.......V..................@..B.symtab.............. .................B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\unarchiver.log

Download File

Process:	C:\Windows\SysWOW64\unarchiver.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	6379
Entropy (8bit):	4.893357087640633
Encrypted:	false
SSDEEP:	48:OWGrGbrGrGp1Gmp2GrGpUGbpG3GDGPGrGyGrGBGiGGHhwGelVpGrGOGcyGcPGrGx:2JEV03hq2PZLzGd3F8n8ZWtrw
MD5:	14F1DF6AB4B48E382006661C87BAB5C9
SHA1:	386CA81497B04DD374BA87B1A927BF21E181985D
SHA-256:	53E025BE04B9D427BB5B1F05C7584584B023033E9A7E84F20F36F63709CDA4E0
SHA-512:	151EF38876E8B92AC6C355F79448B5798B83107AAF00E2AE90C04ABBCD78BE9EBCE289999B4C653498B23EAA78E23D6CEE8F03602540485422113543AFF9907F
Malicious:	false
Reputation:	low
Preview:	10/07/2024 8:31 AM: Unpack: C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip..10/07/2024 8:31 AM: Tmp dir: C:\Users\user\AppData\Local\Temp\lshlpu2r.eym..10/07/2024 8:31 AM: Received from standard out: ..10/07/2024 8:31 AM: Received from standard out: 7-Zip 18.05 (x86) : Copyright (c) 1999-2018 Igor Pavlov : 2018-04-30..10/07/2024 8:31 AM: Received from standard out: ..10/07/2024 8:31 AM: Received from standard out: Scanning the drive for archives:..10/07/2024 8:31 AM: Received from standard out: 1 file, 6694541 bytes (6538 KiB)..10/07/2024 8:31 AM: Received from standard out: ..10/07/2024 8:31 AM: Received from standard out: Extracting archive: C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip..10/07/2024 8:31 AM: Received from standard out: --..10/07/2024 8:31 AM: Received from standard out: Path = C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip..10/07/2024 8:31 AM: Received from standard out: Type = zip..10/07/2024 8:31 AM: Receive

C:\Users\user\Downloads\aa6327d2-dd0f-4b5a-a9bb-eccfcc8f59a4.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	7.987551060870718
Encrypted:	false
SSDEEP:	768:3EDCOyAtokCXIpmTKrnKwtXfmlxW3dhR69BjzQor9VwfyRBCq3oJVhruSc6trurv:3EuGAIQTKrJeHW969BnQowfyRMq3owUq
MD5:	B9318AEB39EFE3782EA9AA8AB8C05499
SHA1:	9DB51D9A4D35B557E756DC3FF523C20AA9854E38
SHA-256:	AD95994E81A86F6C9DB61BBAD884DBCB62BB641CF78532197AC6E0D9E47B3B66
SHA-512:	A8D9EAD97D29D9E7F5A7F6ACF4DD32FD9B9CE385BE2117159E08D8B625D5310D07BCD2AFE54BEE26F62A03328BC4A9F6AC58FDF36A48CA10CF961F7AD9787FDE
Malicious:	false
Reputation:	low
Preview:	PK........9.2Y................LICENSEUT....#.f\Q.n.6...)>......h..L......DE,d. ..y.bdg..I.g...I...nI..2\...2.._../...;9d.c7.x.i.}...)......O..>ar.....%.....C..O]\|u.r@....b...9w~..+:.....<......E.n...z.e7`.....e.........} ..."..f....c.7..p....{.(..~....c<...(.\|-#..pK.X}......uk...<.4..<Q.o..H...ZP..CDr...p..a....C.Th~T...m...I\|b.-.>Mn...)....>....a...E..2xJ..`....?n.r......u......c..n.qv.......O.H.)wK..k....c>3fk.Vo....bo.7Y..O..l............7..?......F.-.ar.o...HU6.J.-^..J[4r'..`5H.A%EKd;a.+._d#.`.i.qn....+.C.......W..VRm.T[...>C(..M(...MCR..l...C..'#..E..J../.../..K....]....V.(mka.....X.z"=..K+....V.........lE.ndK.l.......Z..pJ.Y.j\|..6......Q..H.m.L.?........PK.........<...PK........9.2Y................README.mdUT....#.f.Z{s.8.....GN.X^...]...v..c;....[{.W..-.c.....M6....>.8.$wuu.Ix4..~.G..Z.2.IJS8!n....Su.o....;^{.E.U..eZ.&..s.wk...6[..[...m..7P..WF.9.~w{e.L1.h.2i..p....?H.w.V.5..z8.....X...-..7s.......<7%.f.y...a<U&.......Xg.t.mVY..T.W.d..

C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	6694541
Entropy (8bit):	7.991762260312375
Encrypted:	true
SSDEEP:	196608:zHIPFM5zKyXnUnoiejzBYSesv/K71/wHtkLI+rnx:zMM2tnoiWBYSlK7pitIzx
MD5:	5601A00B960EEF241D27782A6C4CEC08
SHA1:	198AC13AC9B48325084862D75E456CCA068A9A24
SHA-256:	9D6D63B6C57FA82EC4BB61E7CDF504F52470FAE3E46E293A7E9FCCCBADDB1BA7
SHA-512:	7FD6523714D3A88F154D206F0B55A17558989E94A45A30AB5DF01255ABE8F560C4EC7B6E6BD3539BB89F2A7AD16146578544B2116C9392256A3C4F91C519D61D
Malicious:	true
Reputation:	low
Preview:	PK........9.2Y................LICENSEUT....#.f\Q.n.6...)>......h..L......DE,d. ..y.bdg..I.g...I...nI..2\...2.._../...;9d.c7.x.i.}...)......O..>ar.....%.....C..O]\|u.r@....b...9w~..+:.....<......E.n...z.e7`.....e.........} ..."..f....c.7..p....{.(..~....c<...(.\|-#..pK.X}......uk...<.4..<Q.o..H...ZP..CDr...p..a....C.Th~T...m...I\|b.-.>Mn...)....>....a...E..2xJ..`....?n.r......u......c..n.qv.......O.H.)wK..k....c>3fk.Vo....bo.7Y..O..l............7..?......F.-.ar.o...HU6.J.-^..J[4r'..`5H.A%EKd;a.+._d#.`.i.qn....+.C.......W..VRm.T[...>C(..M(...MCR..l...C..'#..E..J../.../..K....]....V.(mka.....X.z"=..K+....V.........lE.ndK.l.......Z..pJ.Y.j\|..6......Q..H.m.L.?........PK.........<...PK........9.2Y................README.mdUT....#.f.Z{s.8.....GN.X^...]...v..c;....[{.W..-.c.....M6....>.8.$wuu.Ix4..~.G..Z.2.IJS8!n....Su.o....;^{.E.U..eZ.&..s.wk...6[..[...m..7P..WF.9.~w{e.L1.h.2i..p....?H.w.V.5..z8.....X...-..7s.......<7%.f.y...a<U&.......Xg.t.mVY..T.W.d..

C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	6694541
Entropy (8bit):	7.991762260312375
Encrypted:	true
SSDEEP:	196608:zHIPFM5zKyXnUnoiejzBYSesv/K71/wHtkLI+rnx:zMM2tnoiWBYSlK7pitIzx
MD5:	5601A00B960EEF241D27782A6C4CEC08
SHA1:	198AC13AC9B48325084862D75E456CCA068A9A24
SHA-256:	9D6D63B6C57FA82EC4BB61E7CDF504F52470FAE3E46E293A7E9FCCCBADDB1BA7
SHA-512:	7FD6523714D3A88F154D206F0B55A17558989E94A45A30AB5DF01255ABE8F560C4EC7B6E6BD3539BB89F2A7AD16146578544B2116C9392256A3C4F91C519D61D
Malicious:	false
Reputation:	low
Preview:	PK........9.2Y................LICENSEUT....#.f\Q.n.6...)>......h..L......DE,d. ..y.bdg..I.g...I...nI..2\...2.._../...;9d.c7.x.i.}...)......O..>ar.....%.....C..O]\|u.r@....b...9w~..+:.....<......E.n...z.e7`.....e.........} ..."..f....c.7..p....{.(..~....c<...(.\|-#..pK.X}......uk...<.4..<Q.o..H...ZP..CDr...p..a....C.Th~T...m...I\|b.-.>Mn...)....>....a...E..2xJ..`....?n.r......u......c..n.qv.......O.H.)wK..k....c>3fk.Vo....bo.7Y..O..l............7..?......F.-.ar.o...HU6.J.-^..J[4r'..`5H.A%EKd;a.+._d#.`.i.qn....+.C.......W..VRm.T[...>C(..M(...MCR..l...C..'#..E..J../.../..K....]....V.(mka.....X.z"=..K+....V.........lE.ndK.l.......Z..pJ.Y.j\|..6......Q..H.m.L.?........PK.........<...PK........9.2Y................README.mdUT....#.f.Z{s.8.....GN.X^...]...v..c;....[{.W..-.c.....M6....>.8.$wuu.Ix4..~.G..Z.2.IJS8!n....Su.o....;^{.E.U..eZ.&..s.wk...6[..[...m..7P..WF.9.~w{e.L1.h.2i..p....?H.w.V.5..z8.....X...-..7s.......<7%.f.y...a<U&.......Xg.t.mVY..T.W.d..

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	downloaded
Size (bytes):	6694541
Entropy (8bit):	7.991762260312375
Encrypted:	true
SSDEEP:	196608:zHIPFM5zKyXnUnoiejzBYSesv/K71/wHtkLI+rnx:zMM2tnoiWBYSlK7pitIzx
MD5:	5601A00B960EEF241D27782A6C4CEC08
SHA1:	198AC13AC9B48325084862D75E456CCA068A9A24
SHA-256:	9D6D63B6C57FA82EC4BB61E7CDF504F52470FAE3E46E293A7E9FCCCBADDB1BA7
SHA-512:	7FD6523714D3A88F154D206F0B55A17558989E94A45A30AB5DF01255ABE8F560C4EC7B6E6BD3539BB89F2A7AD16146578544B2116C9392256A3C4F91C519D61D
Malicious:	false
Reputation:	low
URL:	https://objects.githubusercontent.com/github-production-release-asset-2e65be/60978152/8177ff65-eabf-4864-ae34-9164f71dcf5a?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241007%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241007T123146Z&X-Amz-Expires=300&X-Amz-Signature=c55c6266b316e9431b9245ec62a2d4766f22b4c892914ef8c77150f1c7ce4cc1&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dterraform-docs-v0.19.0-windows-amd64.zip&response-content-type=application%2Foctet-stream
Preview:	PK........9.2Y................LICENSEUT....#.f\Q.n.6...)>......h..L......DE,d. ..y.bdg..I.g...I...nI..2\...2.._../...;9d.c7.x.i.}...)......O..>ar.....%.....C..O]\|u.r@....b...9w~..+:.....<......E.n...z.e7`.....e.........} ..."..f....c.7..p....{.(..~....c<...(.\|-#..pK.X}......uk...<.4..<Q.o..H...ZP..CDr...p..a....C.Th~T...m...I\|b.-.>Mn...)....>....a...E..2xJ..`....?n.r......u......c..n.qv.......O.H.)wK..k....c>3fk.Vo....bo.7Y..O..l............7..?......F.-.ar.o...HU6.J.-^..J[4r'..`5H.A%EKd;a.+._d#.`.i.qn....+.C.......W..VRm.T[...>C(..M(...MCR..l...C..'#..E..J../.../..K....]....V.(mka.....X.z"=..K+....V.........lE.ndK.l.......Z..pJ.Y.j\|..6......Q..H.m.L.?........PK.........<...PK........9.2Y................README.mdUT....#.f.Z{s.8.....GN.X^...]...v..c;....[{.W..-.c.....M6....>.8.$wuu.Ix4..~.G..Z.2.IJS8!n....Su.o....;^{.E.U..eZ.&..s.wk...6[..[...m..7P..WF.9.~w{e.L1.h.2i..p....?H.w.V.5..z8.....X...-..7s.......<7%.f.y...a<U&.......Xg.t.mVY..T.W.d..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 14:31:29.477509975 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 7, 2024 14:31:39.086842060 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 7, 2024 14:31:44.489092112 CEST	49736	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:31:44.489151001 CEST	443	49736	142.250.186.36	192.168.2.4
Oct 7, 2024 14:31:44.489496946 CEST	49736	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:31:44.489689112 CEST	49736	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:31:44.489731073 CEST	443	49736	142.250.186.36	192.168.2.4
Oct 7, 2024 14:31:45.116916895 CEST	443	49736	142.250.186.36	192.168.2.4
Oct 7, 2024 14:31:45.117579937 CEST	49736	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:31:45.117611885 CEST	443	49736	142.250.186.36	192.168.2.4
Oct 7, 2024 14:31:45.118514061 CEST	443	49736	142.250.186.36	192.168.2.4
Oct 7, 2024 14:31:45.118607998 CEST	49736	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:31:45.119754076 CEST	49736	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:31:45.119817019 CEST	443	49736	142.250.186.36	192.168.2.4
Oct 7, 2024 14:31:45.163947105 CEST	49736	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:31:45.163970947 CEST	443	49736	142.250.186.36	192.168.2.4
Oct 7, 2024 14:31:45.210818052 CEST	49736	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:31:45.933198929 CEST	49737	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:45.933242083 CEST	443	49737	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:45.933320045 CEST	49737	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:45.933896065 CEST	49737	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:45.933911085 CEST	443	49737	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:45.936554909 CEST	49738	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:45.936562061 CEST	443	49738	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:45.936647892 CEST	49738	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:45.936800003 CEST	49738	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:45.936805010 CEST	443	49738	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.535041094 CEST	443	49738	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.551708937 CEST	443	49737	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.583609104 CEST	49738	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.598167896 CEST	49737	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.615654945 CEST	49737	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.615667105 CEST	443	49737	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.615767002 CEST	49738	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.615772009 CEST	443	49738	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.616965055 CEST	443	49737	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.616977930 CEST	443	49738	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.617043018 CEST	49737	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.617074013 CEST	49738	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.618462086 CEST	49737	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.618540049 CEST	443	49737	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.621229887 CEST	49738	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.621288061 CEST	443	49738	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.624008894 CEST	49737	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.624017000 CEST	443	49737	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.672889948 CEST	49738	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.672897100 CEST	443	49738	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.672926903 CEST	49737	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.719470024 CEST	49738	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.945616007 CEST	443	49737	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.945820093 CEST	443	49737	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.945862055 CEST	443	49737	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.946006060 CEST	49737	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.946006060 CEST	49737	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.946444988 CEST	49737	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:46.946461916 CEST	443	49737	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:46.959891081 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:46.959950924 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:46.960038900 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:46.960283995 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:46.960303068 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:47.537039995 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:47.537774086 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:47.537822008 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:47.538707972 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:47.538779974 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:47.570925951 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:47.571135044 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:47.571150064 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:47.571273088 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:47.617913008 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:47.617934942 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:47.667953968 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.004817963 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.005000114 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.005076885 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.005104065 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.005136013 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.005228043 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.005271912 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.005280972 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.005366087 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.005414009 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.005422115 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.005458117 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.005464077 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.016499043 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.016654015 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.016680956 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.016726017 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.016736031 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.016773939 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.016902924 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.018807888 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.018870115 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.018884897 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.018891096 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.018919945 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.018929005 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.018942118 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.018955946 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.018963099 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.019016981 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.019047022 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.019056082 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.019067049 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.019103050 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.019109011 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.019140005 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.031224966 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.031285048 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.031308889 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.031351089 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.031359911 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.031395912 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.031835079 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.031887054 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.031929016 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.031935930 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.033129930 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.033158064 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.033179045 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.033185005 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.033216000 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.033241034 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.033251047 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.033257961 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.033288002 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.037441015 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.037450075 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.037482023 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.037512064 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.037519932 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.037555933 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.037575960 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.039999962 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.040019035 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.040092945 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.040100098 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.042448997 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.042468071 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.042500019 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.042507887 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.042531013 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.044121981 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.044138908 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.044188976 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.044199944 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.045397043 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.045418978 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.045445919 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.045453072 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.045471907 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.045691967 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.045705080 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.045737982 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.045746088 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.045766115 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.046948910 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.046972990 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.047110081 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.047110081 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.047121048 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.048171997 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.048187017 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.048243046 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.048249960 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.049163103 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.049180984 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.049248934 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.049256086 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.050122023 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.050134897 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.050189972 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.050196886 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.057866096 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.057887077 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.057935953 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.057945013 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.057984114 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.058087111 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.058101892 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.058150053 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.058157921 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.058387041 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.058407068 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.058440924 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.058453083 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.058479071 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.058661938 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.058676958 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.058736086 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.058744907 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.058851957 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.058871984 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.058919907 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.058928013 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.058948994 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.061372042 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.061386108 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.061448097 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.061459064 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.061600924 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.061619043 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.061644077 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.061650991 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.061669111 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.064311981 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.064327002 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.064384937 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.064392090 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.118407011 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.140768051 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.140794992 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.140871048 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.140880108 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.141347885 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.141370058 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.141406059 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.141413927 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.141426086 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.141457081 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.141798973 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.141815901 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.141861916 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.141870022 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.142144918 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.142163992 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.142190933 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.142199039 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.142229080 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.142250061 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.142600060 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.142612934 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.142668009 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.142676115 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.142746925 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.143719912 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.145966053 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.145981073 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.146053076 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.146060944 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.146183968 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.146424055 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.146440029 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.146497011 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.146507025 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.146554947 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.148206949 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.148226023 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.148277998 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.148283958 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.148320913 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.228132010 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.228197098 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.228229046 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.228312016 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.228364944 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.228364944 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.228379965 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.228411913 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.228441000 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.228461981 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.228462934 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.228487015 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.228519917 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.228543043 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.228652000 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.228693962 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.228713989 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.228729963 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.228765011 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.228786945 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.229614973 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.229656935 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.229702950 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.229702950 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.229726076 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.229804039 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.229854107 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.229881048 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.229896069 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.229938984 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.229938984 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.229988098 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.230030060 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.230058908 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.230071068 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.230097055 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.230581045 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.230788946 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.230832100 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.230864048 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.230876923 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.230906963 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.231029987 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.231998920 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.232039928 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.232058048 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.232072115 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.232098103 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.232117891 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.233145952 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.308439016 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.308510065 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.308549881 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.308574915 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.308609009 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.308630943 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.308881044 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.308934927 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.308963060 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.308975935 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.309005022 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.309319973 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.309322119 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.309354067 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.309396982 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.309396982 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.309410095 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.309436083 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.309473038 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.309495926 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.309766054 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.309812069 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.309894085 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.309894085 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.309910059 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.310031891 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.310265064 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.310312033 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.310336113 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.310349941 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.310376883 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.311080933 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.312370062 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.312383890 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.312437057 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.312458038 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.312755108 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.312772036 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.312805891 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.312820911 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.312848091 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.313186884 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.313662052 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.313674927 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.313716888 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.313730955 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.313755989 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.313776016 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.363533974 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.391252995 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.391278982 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.391355991 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.391374111 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.391429901 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.391556025 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.391571045 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.391637087 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.391650915 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.391860962 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.392246008 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.392290115 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.392316103 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.392328978 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.392357111 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.392378092 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.392724037 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.392770052 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.392790079 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.392802954 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.392841101 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.392841101 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.393388987 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.393441916 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.393462896 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.393476009 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.393501043 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.393521070 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.395256042 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.395303011 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.395332098 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.395344019 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.395371914 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.395415068 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.395579100 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.395627022 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.395647049 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.395661116 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.395689011 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.395709038 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.396522999 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.396565914 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.396595001 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.396606922 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.396656990 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.396677017 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.473942995 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.474013090 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.474066973 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.474096060 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.474128008 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.474149942 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.475047112 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.475095987 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.475117922 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.475131989 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.475158930 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.475177050 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.475826025 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.475874901 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.475898981 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.475912094 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.475940943 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.475966930 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.476944923 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.477000952 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.477025032 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.477036953 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.477075100 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.477096081 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.477703094 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.477747917 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.477791071 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.477803946 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.477833033 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.477854013 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.483748913 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.483795881 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.483848095 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.483860970 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.483890057 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.483906984 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.484249115 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.484294891 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.484319925 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.484333038 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.484364033 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.484384060 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.485142946 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.485187054 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.485219002 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.485232115 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.485259056 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.485276937 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.556337118 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.556358099 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.556417942 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.556442022 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.556474924 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.556485891 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.556771040 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.556787014 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.556843042 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.556852102 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.556896925 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.557847977 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.557862043 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.557939053 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.557948112 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.557993889 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.558541059 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.558557034 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.558615923 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.558625937 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.558706999 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.558908939 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.558929920 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.558983088 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.558991909 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.559179068 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.562385082 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.562402010 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.562465906 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.562475920 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.564378977 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.565367937 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.565383911 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.565445900 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.565454960 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.565686941 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.565706015 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.565746069 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.565753937 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.565767050 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.565795898 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.571475029 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.639053106 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.639117956 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.639142990 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.639162064 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.639187098 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.639205933 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.639667988 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.639710903 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.639745951 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.639754057 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.639780045 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.639791965 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.640316010 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.640362978 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.640391111 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.640398979 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.640429974 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.640439034 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.641354084 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.641375065 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.641453028 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.641469955 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.641628027 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.641648054 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.641665936 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.641680002 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.641710043 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.641731977 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.648113012 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.648128033 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.648206949 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.648221970 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.648281097 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.648922920 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.648940086 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.649004936 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.649018049 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.649210930 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.649224997 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.649235964 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.649276972 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.649288893 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.649329901 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.649358988 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.649379969 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.722651005 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.722712994 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.722759962 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.722786903 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.722831964 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.722856045 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.722877979 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.722920895 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.722948074 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.722960949 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.722985983 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.723006010 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.723050117 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.723093033 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.723114014 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.723128080 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.723156929 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.723176956 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.725163937 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.725208044 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.725239992 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.725251913 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.725279093 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.725296974 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.725467920 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.725511074 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.725549936 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.725568056 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.725593090 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.725619078 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.731376886 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.731482029 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.731484890 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.731513977 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.731554985 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.731554985 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.731786013 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.731836081 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.731863976 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.731877089 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.731901884 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.731982946 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.732501030 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.732544899 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.732568026 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.732580900 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.732608080 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.732629061 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.753077984 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.805149078 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.805210114 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.805243015 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.805258036 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.805290937 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.805320024 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.805377960 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.805428028 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.805440903 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.805469990 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.805500031 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.805520058 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.805696011 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.805742025 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.805769920 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.805783987 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.805811882 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.805833101 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.806806087 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.806849957 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.806876898 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.806890965 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.806915045 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.806932926 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.807110071 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.807156086 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.807179928 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.807193041 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.807219028 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.807235956 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.813606024 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.813635111 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.813674927 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.813688040 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.813713074 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.813730001 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.814541101 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.814583063 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.814645052 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.814657927 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.814702034 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.814810038 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.815380096 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.815447092 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.815587997 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.815603018 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.815720081 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.888144970 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.888170004 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.888269901 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.888299942 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.888382912 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.888542891 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.888598919 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.888619900 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.888633013 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.888662100 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.888683081 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.888729095 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.888772964 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.888792992 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.888806105 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.888832092 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.888849020 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.889718056 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.889771938 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.889803886 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.889817953 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.889842987 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.890022993 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.890075922 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.890109062 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.890122890 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.890150070 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.892404079 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.896409988 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.896451950 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.896501064 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.896516085 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.896545887 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.896575928 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.897237062 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.897273064 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.897315025 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.897334099 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.897356987 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.897919893 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.897959948 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.897990942 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.898009062 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.898034096 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.898034096 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.900008917 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.954302073 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.973532915 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.973556042 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.973647118 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.973664999 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.973741055 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.973855019 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.973871946 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.973927975 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.973942041 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.974083900 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.974261045 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.974277020 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.974349022 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.974363089 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.974673033 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.974693060 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.974694014 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.974714041 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.974720955 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.974752903 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.974772930 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.974993944 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.975011110 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.975066900 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.975081921 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.975131989 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.975502968 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.979245901 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.979260921 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.979342937 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.979357958 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.979432106 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.980123043 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.980138063 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.980195999 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.980209112 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.980262041 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.980964899 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.980988979 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.981043100 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.981056929 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:48.981082916 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:48.981102943 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.053617954 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.053641081 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.053721905 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.053736925 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.054112911 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.054164886 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.054188013 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.054203987 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.054235935 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.054255962 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.054516077 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.054559946 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.054583073 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.054610968 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.054626942 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.054661036 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.056535006 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.056549072 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.056602001 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.056615114 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.057123899 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.057140112 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.057179928 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.057199001 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.057220936 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.057239056 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.061956882 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.061974049 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.062048912 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.062062979 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.063008070 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.063025951 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.063070059 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.063083887 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.063113928 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.063133955 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.064301968 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.064315081 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.064374924 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.064388990 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.068387032 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.079785109 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.136545897 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.136570930 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.136614084 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.136631966 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.136662006 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.136683941 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.138508081 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.138550997 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.138592958 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.138607025 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.138633013 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.138650894 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.138698101 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.138742924 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.138778925 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.138792038 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.138818026 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.138870955 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.139659882 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.139702082 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.139748096 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.139744997 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:49.139764071 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.139791012 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.139811993 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.139837980 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:49.140002012 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:49.140741110 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.140784025 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.140815973 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.140830040 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.140855074 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.140875101 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.149403095 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:49.149440050 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:49.392482996 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.392509937 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.392633915 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.392633915 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.392663956 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.392678976 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.392716885 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.392782927 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.392792940 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.392896891 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.392896891 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.392963886 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.392980099 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.393030882 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.393038034 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.393136978 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.396941900 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.396958113 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.397058010 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.397087097 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.397275925 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.397358894 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.397386074 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.397424936 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.397427082 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.397443056 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.397449017 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.397464991 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.397469997 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.397507906 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.397517920 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.397922039 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.398031950 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.398051977 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.398108006 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.398118019 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.398199081 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.398359060 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.398381948 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.398436069 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.398444891 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.398467064 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.398483038 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.399274111 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.399291992 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.399333000 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.399341106 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.399374008 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.399391890 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.399722099 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.399740934 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.399790049 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.399797916 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.399868965 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.400187016 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.400207996 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.400253057 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.400260925 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.400288105 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.400300026 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.401017904 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.401034117 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.401099920 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.401112080 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.401210070 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.401814938 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.401833057 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.401868105 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.401878119 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.401902914 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.401921034 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.402105093 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.402120113 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.402175903 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.402188063 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.402232885 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.405236006 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.405260086 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.405294895 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.405304909 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.405329943 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.405329943 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.405345917 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.405352116 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.405361891 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.405385971 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.405420065 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.405478001 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.405492067 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.405540943 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.405550003 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.405601025 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.405605078 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.405613899 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.405627966 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.405646086 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.405654907 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.405670881 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.405733109 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.405992985 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406007051 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406049013 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.406056881 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406105995 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.406183004 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406199932 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406238079 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.406245947 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406260014 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.406284094 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.406322002 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406337023 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406380892 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.406388998 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406431913 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406454086 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406471014 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.406480074 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406493902 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.406541109 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.406583071 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.406843901 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406858921 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406898022 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.406905890 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.406919956 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.406948090 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.407515049 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.407531023 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.407571077 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.407578945 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.407664061 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.407680035 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.407695055 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.407737017 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.407746077 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.407788038 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.447259903 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.447309971 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.447348118 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.447364092 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.447412968 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.447412968 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.447664022 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.447706938 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.447727919 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.447742939 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.447773933 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.447793961 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.487607002 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.487626076 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.487762928 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.487803936 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.488308907 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.488362074 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.488390923 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.488413095 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.488446951 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.488528967 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.488548994 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.488565922 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.488599062 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.488599062 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.488620996 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.488635063 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.488661051 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.488688946 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.488766909 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.488806009 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.488828897 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.488842964 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.488868952 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.488888979 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.488965034 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.489005089 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.489034891 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.489048958 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.489078999 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.489115000 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.489296913 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.489336967 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.489377975 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.489397049 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.489474058 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.489708900 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.529891014 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.529913902 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.529987097 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.530050039 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.530082941 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.530252934 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.530277014 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.530297041 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.530328989 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.530343056 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.530379057 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.530380011 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.571260929 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.571276903 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.571429968 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.571479082 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.571623087 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.571773052 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.571787119 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.571851015 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.571867943 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.571937084 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.572315931 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.572335958 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.572402000 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.572416067 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.572475910 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.572853088 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.572868109 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.572933912 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.572952986 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.573024035 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.573241949 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.573256969 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.573326111 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.573339939 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.573678970 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.573734999 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.573751926 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.573810101 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.573827982 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.574888945 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.580205917 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.612952948 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.612999916 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.613044977 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.613084078 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.613112926 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.613156080 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.613318920 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.613360882 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.613423109 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.613423109 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.613441944 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.613482952 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.654464960 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.654526949 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.654587030 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.654614925 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.654658079 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.654769897 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.654809952 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.654819012 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.654829979 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.654846907 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.654900074 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.655004978 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.655045033 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.655061007 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.655072927 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.655097961 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.655114889 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.655193090 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.655236959 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.655275106 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.655282974 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.655294895 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.655318975 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.655594110 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.655637026 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.655653954 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.655663013 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.655695915 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.656076908 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.656079054 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.656100988 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.656135082 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.656147003 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.656157970 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.656171083 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.656202078 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.656224966 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.695890903 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.695919037 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.695979118 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.696001053 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.696042061 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.696094990 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.696118116 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.696166992 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.696175098 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.696367025 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.736938953 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.736984968 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.737026930 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.737052917 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.737070084 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.737253904 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.737294912 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.737337112 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.737358093 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.737365961 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.737387896 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.737405062 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.737799883 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.737843037 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.737865925 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.737874031 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.737903118 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.737915993 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.738189936 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.738233089 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.738257885 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.738264084 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.738292933 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.738310099 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.738449097 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.738490105 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.738519907 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.738528013 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.738547087 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.738564014 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.738895893 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.738941908 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.738959074 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.738969088 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.738996029 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.739006042 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.778713942 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.778738976 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.778793097 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.778826952 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.778852940 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.779061079 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.779119968 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.779135942 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.779191971 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.779207945 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.779619932 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.820332050 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.820379019 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.820421934 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.820461035 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.820487976 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.820508003 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.820677996 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.820719004 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.820741892 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.820755005 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.820779085 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.820811033 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.821084023 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.821119070 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.821161032 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.821173906 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.821199894 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.821219921 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.821393967 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.821429014 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.821456909 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.821470022 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.821497917 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.821516991 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.821820021 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.821855068 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.821885109 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.821897030 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.821922064 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.821947098 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.822113991 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.822149038 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.822180986 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.822192907 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.822217941 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.822237968 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.861124992 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.861140013 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.861206055 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.861221075 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.861274004 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.861702919 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.861741066 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.861768961 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.861783028 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.861807108 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.861839056 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.903012037 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.903042078 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.903096914 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.903117895 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.903145075 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.903165102 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.903582096 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.903623104 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.903650045 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.903664112 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.903687954 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.903707027 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.903909922 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.903950930 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.903975010 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.903986931 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.904014111 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.904031038 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.904325008 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.904366970 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.904392958 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.904405117 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.904428959 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.904464960 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.904668093 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.904706955 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.904733896 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.904752016 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.904772043 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.904788971 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.905005932 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.905045986 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.905070066 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.905082941 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.905107021 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.905128002 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.921371937 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.945980072 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.945998907 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.946079969 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.946095943 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.946152925 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.946429014 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.946444988 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.946496964 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.946508884 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.946535110 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.946552038 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.986649036 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.986665010 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.986711025 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.986723900 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.986751080 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.986769915 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.987247944 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.987263918 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.987718105 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.987731934 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.987781048 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.987850904 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.987864971 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.987910032 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.987924099 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.987972975 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.988382101 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.988396883 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.988451958 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.988466024 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.988512039 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.988903999 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.988918066 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.988969088 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.988981962 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.989037991 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.989363909 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.989377975 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.989425898 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.989438057 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:49.989463091 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:49.989495993 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.027806997 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:50.027875900 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:50.028939962 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.028965950 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.029051065 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.029051065 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.029069901 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.029119968 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.029536009 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.029556036 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.029608011 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.029622078 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.029669046 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.036946058 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:50.036958933 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:50.037209988 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:50.071511984 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.071527958 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.071578979 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.071594000 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.071620941 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.071640968 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.071942091 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.071959972 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.071999073 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.072016001 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.072038889 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.072058916 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.072436094 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.072449923 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.072496891 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.072509050 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.072534084 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.072551966 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.072978020 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.072992086 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.073036909 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.073049068 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.073100090 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.073380947 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.073455095 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.073631048 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.073684931 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.073699951 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.073714018 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.073751926 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.073769093 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.073791027 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.073812008 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.077759027 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.085957050 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:50.113131046 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.113147020 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.113193035 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.113220930 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.113243103 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.113262892 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.113756895 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.113799095 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.113820076 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.113833904 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.113859892 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.113878965 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.154774904 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.154792070 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.154840946 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.154870987 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.154885054 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.154908895 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.155221939 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.155265093 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.155282021 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.155333042 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.155364990 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.155364990 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.155401945 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.155723095 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.155764103 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.155776978 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.155793905 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.155814886 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.155834913 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.156040907 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.156083107 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.156090975 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.156105042 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.156121969 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.156136036 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.156440020 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.156483889 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.156531096 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.156531096 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.156538963 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.156573057 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.157337904 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.157383919 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.157394886 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.157404900 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.157438040 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.157452106 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.175127029 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.195334911 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.195415974 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.195434093 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.195492029 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.195588112 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.195632935 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.195643902 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.195661068 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.195683956 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.195702076 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.235929012 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.235946894 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.235997915 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.236027002 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.236048937 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.236063957 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.236148119 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.236186981 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.236213923 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.236221075 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.236239910 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.236262083 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.236608982 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.236650944 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.236660004 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.236675978 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.236702919 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.236728907 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.236820936 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.236867905 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.236882925 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.236891031 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.236918926 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.236936092 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.237799883 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.237843037 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.237864017 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.237869978 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.237906933 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.237920046 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.237943888 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.237984896 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.238001108 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.238008976 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.238049984 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.238061905 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.277581930 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.277599096 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.277683973 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.277709961 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.277857065 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.278002024 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.278016090 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.278065920 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.278073072 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.278095961 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.278110027 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.318808079 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.318826914 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.318872929 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.318897963 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.318921089 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.318939924 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.319176912 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.319190979 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.319240093 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.319247961 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.319279909 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.319422007 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.319436073 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.319489002 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.319497108 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.319528103 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.319881916 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.319895983 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.319936037 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.319941044 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.319968939 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.319984913 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.320194006 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.320207119 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.320252895 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.320260048 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.320301056 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.320507050 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.320521116 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.320569992 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.320575953 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.320607901 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.340795040 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:50.342653990 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.360912085 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.360934019 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.360985994 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.360999107 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.361037016 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.361221075 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.361236095 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.361284018 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.361290932 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.361323118 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.383429050 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:50.396115065 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.396230936 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.401801109 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.401828051 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.401884079 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.401910067 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.401926994 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.401947021 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.402184010 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.402226925 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.402235985 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.402257919 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.402268887 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.402303934 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.402436972 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.402489901 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.402503014 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.402517080 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.402532101 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.402545929 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.403028011 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.403074026 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.403094053 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.403115034 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.403131008 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.403165102 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.403543949 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.403584957 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.403604984 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.403621912 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.403639078 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.403651953 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.403906107 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.403925896 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.403942108 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.403948069 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.403980970 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.403992891 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.404004097 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.404026985 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.443649054 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.443669081 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.443727016 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.443752050 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.443767071 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.443789005 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.444031954 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.444076061 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.444103003 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.444109917 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.444130898 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.444145918 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.488187075 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.488204002 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.488266945 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.488291979 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.488332033 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.488574982 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.488589048 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.488637924 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.488645077 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.488679886 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.489000082 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.489015102 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.489061117 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.489068031 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.489101887 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.489387989 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.489402056 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.489450932 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.489458084 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.489480019 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.489495993 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.489824057 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.489839077 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.489892006 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.489898920 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.489933968 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.490215063 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.490231991 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.490278959 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.490284920 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.490331888 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.513914108 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:50.513976097 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:50.514034033 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:50.514134884 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:50.514134884 CEST	49741	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:50.514154911 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:50.514163017 CEST	443	49741	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:50.526273966 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.526319981 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.526354074 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.526365042 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.526376963 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.526405096 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.526669979 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.526710987 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.526726961 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.526737928 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.526761055 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.526938915 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.561737061 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:50.561785936 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:50.561846018 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:50.562169075 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:50.562186956 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:50.571510077 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.571568966 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.571579933 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.571594954 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.571628094 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.571643114 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.571682930 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.571710110 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.571742058 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.571752071 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.571773052 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.571801901 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.572134018 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.572149038 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.572179079 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.572186947 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.572211027 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.572225094 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.572550058 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.572566032 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.572597027 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.572604895 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.572628975 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.572638988 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.572971106 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.572988987 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.573026896 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.573033094 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.573062897 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.573077917 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.573314905 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.573332071 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.573378086 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.573385954 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.573416948 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.609713078 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.609775066 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.609806061 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.609833956 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.609848976 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.609869003 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.609920025 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.609972000 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.609980106 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.610004902 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.610030890 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.610053062 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.654248953 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.654299974 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.654339075 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.654360056 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.654373884 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.654396057 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.654464960 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.654508114 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.654527903 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.654535055 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.654561043 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.654575109 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.654993057 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.655031919 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.655055046 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.655061007 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.655093908 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.655109882 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.655292034 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.655333996 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.655369043 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.655375004 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.655402899 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.655427933 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.655968904 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.655987024 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.656042099 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.656049967 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.656088114 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.656411886 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.656428099 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.656568050 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.656568050 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.656593084 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.656671047 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.692115068 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.692131996 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.692200899 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.692234039 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.692276001 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.692420006 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.692436934 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.692486048 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.692493916 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.692605019 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.737258911 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.737288952 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.737364054 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.737390995 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.737433910 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.737536907 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.737551928 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.737586975 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.737595081 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.737621069 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.737629890 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.737831116 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.737848997 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.737890005 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.737895966 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.737924099 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.737931967 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.738205910 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.738223076 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.738265991 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.738286018 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.738323927 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.738466024 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.738481045 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.738523006 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.738529921 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.738549948 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.738576889 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.738773108 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.738786936 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.738825083 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.738831997 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.738858938 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.738871098 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.774954081 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.774979115 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.775068045 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.775129080 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.775197029 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.775351048 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.775367975 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.775433064 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.775449038 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.775501966 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.820009947 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.820039988 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.820187092 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.820187092 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.820210934 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.820355892 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.820374966 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.820389032 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.820444107 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.820460081 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.820976019 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.820996046 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.821125984 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.821125984 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.821144104 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.821456909 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.821470976 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.821561098 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.821561098 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.821578979 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.821822882 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.821918011 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.821930885 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.822041035 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.822041035 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.822057009 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.822417021 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.822434902 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.822506905 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.822506905 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.822521925 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.824465990 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.857551098 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.857564926 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.857712030 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.857712030 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.857742071 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.857870102 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.857892990 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.858207941 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.858222961 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.858644962 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.903008938 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.903034925 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.903182030 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.903182983 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.903224945 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.903394938 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.903415918 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.903459072 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.903476954 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.903510094 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.903623104 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.903929949 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.903948069 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.904139996 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.904159069 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.904366970 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.904366970 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.904381990 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.904455900 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.904455900 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.904458046 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.904501915 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.904531956 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.904905081 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.904918909 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.904921055 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.904937983 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.905031919 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.905031919 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.905358076 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.905375004 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.905503988 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.905528069 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.905663013 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.941198111 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.941215992 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.941453934 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.941484928 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.941559076 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.941633940 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.941648960 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.941735029 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.941735983 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.941751957 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.941975117 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.985968113 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.985985994 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.986362934 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.986406088 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.986413956 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.986438036 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.986450911 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.986917019 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.986929893 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.986953974 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.986963034 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.986982107 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.987095118 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.987312078 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.987325907 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.987404108 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.987404108 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.987411976 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.987929106 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.987945080 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.988127947 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.988128901 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.988156080 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.988328934 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.988343000 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.988385916 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:50.988394976 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:50.988423109 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.024394035 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.024416924 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.024547100 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.024547100 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.024565935 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.024849892 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.024861097 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.024904013 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.024912119 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.024934053 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.068841934 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.068861008 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.068964958 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.068977118 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.068978071 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.068977118 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.069006920 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.069021940 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.069250107 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.069267988 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.069286108 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.069294930 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.069308996 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.069323063 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.069746017 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.069758892 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.069778919 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.069786072 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.069796085 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.069983959 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.069999933 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.070014954 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.070022106 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.070033073 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.070097923 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.070097923 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.070389032 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.070400953 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.070467949 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.070467949 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.070476055 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.076354027 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.107072115 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.107089043 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.107310057 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.107345104 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.107346058 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.107359886 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.107379913 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.108352900 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.151976109 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.151997089 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.152267933 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.152333021 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.152364969 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.152383089 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.152427912 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.152446032 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.152492046 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.152617931 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.152761936 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.152776957 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.152849913 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.152849913 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.152868986 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.152949095 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.154381037 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.154393911 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.154587984 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.154602051 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.154706001 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.155164957 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.155178070 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.155277014 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.155277014 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.155292988 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.155447006 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.155742884 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.155761003 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.155863047 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.155878067 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.156060934 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.169146061 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:51.172370911 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:51.185499907 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:51.185516119 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:51.185769081 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:51.189464092 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:51.190073967 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.190089941 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.190169096 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.190188885 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.190226078 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.190249920 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.190582991 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.190597057 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.190720081 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.190732002 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.191440105 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.231400013 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:51.234833956 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.234846115 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.235235929 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.235268116 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.235275984 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.235295057 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.235312939 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.235661030 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.235675097 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.235703945 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.235755920 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.235755920 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.235763073 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.237158060 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.237173080 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.237242937 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.237242937 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.237251043 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.238029003 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.238040924 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.238393068 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.238401890 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.238498926 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.238514900 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.238579988 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.238579988 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.238586903 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.272994041 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.273005962 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.273392916 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.273407936 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.273432016 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.273441076 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.273462057 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.273864985 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.286345005 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.317537069 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.317550898 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.317677021 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.317715883 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.317717075 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.317739964 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.317754984 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.317764044 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.317914009 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.317925930 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.318248034 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.318255901 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.319915056 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.319931030 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.320020914 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.320020914 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.320029020 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.320664883 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.320681095 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.321002007 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.321017027 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.321039915 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.321047068 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.321069956 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.321069956 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.324357033 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.355839014 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.355858088 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.356261015 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.356291056 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.356295109 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.356316090 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.356333971 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.356426954 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.405088902 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.405103922 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.405210018 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.405210018 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.405219078 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.405466080 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.405481100 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.405488968 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.405493975 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.405523062 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.405776024 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.406323910 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.406336069 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.406502008 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.406527996 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.406532049 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.406541109 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.406554937 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.406725883 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.406950951 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.406964064 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.406980038 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.407157898 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.407162905 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.407233000 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.407248974 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.407301903 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.407303095 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.407309055 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.413541079 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.427289963 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:51.427359104 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:51.432447910 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:51.438621044 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.438636065 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.439026117 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.439059973 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.439064026 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.439083099 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.439096928 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.440357924 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.488212109 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.488233089 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.488629103 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.488656044 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.488665104 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.488675117 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.488684893 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.489023924 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.489036083 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.489063025 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.489492893 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.489512920 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.489520073 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.489537001 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.489557981 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.489795923 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.489844084 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.489856958 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.490233898 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.490259886 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.490259886 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.490274906 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.490284920 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.491413116 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.515408039 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.524060011 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.524075985 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.524585009 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.524614096 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.524621964 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.524641037 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.524652004 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.524658918 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.526443958 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.547558069 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:51.547558069 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 7, 2024 14:31:51.547580004 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:51.547589064 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 7, 2024 14:31:51.571357965 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.571373940 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.571806908 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.571845055 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.571845055 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.571890116 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.571907997 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.571914911 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.572161913 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.572173119 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.572508097 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.572525024 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.572562933 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.572562933 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.572571993 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.572593927 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.572997093 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.573009014 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.573389053 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.573405027 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.573425055 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.573432922 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.573453903 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.573453903 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.606911898 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.606925964 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.607136011 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.607145071 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.607156038 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.607167006 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.607192039 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.607351065 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.615753889 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.615753889 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.654695034 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.654711962 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.654788971 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.654819012 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.654953003 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.654973984 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.654983044 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.654990911 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.655004978 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.655193090 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.655199051 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.655209064 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.655256987 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.655289888 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.655297041 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.655320883 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.655330896 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.655349016 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.655420065 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.655420065 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.655428886 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.655612946 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.655626059 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.655693054 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.655693054 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.655702114 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.655909061 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.655925989 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.655992985 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.655992985 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.655999899 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.656452894 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.656481028 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.690582991 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.690598011 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.690680027 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.690686941 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.690707922 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.690922976 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.690939903 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.691010952 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.691010952 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.691019058 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.692723989 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.699450970 CEST	443	49738	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:51.699537039 CEST	443	49738	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:51.699815989 CEST	49738	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:51.737967014 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.738029003 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.738105059 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.738167048 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.738210917 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.738213062 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.738266945 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.738270044 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.738300085 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.738327980 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.738368034 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.738368034 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.738460064 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.738501072 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.738548040 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.738570929 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.738595963 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.738665104 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.738712072 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.738764048 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.738779068 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.738812923 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.739089966 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.739146948 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.739186049 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.739228964 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.739240885 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.739273071 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.739315987 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.739340067 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.739382029 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.739447117 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.739463091 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.739491940 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.739713907 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.773431063 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.773452044 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.773644924 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.773660898 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.773714066 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.773730040 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.773735046 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.773753881 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.773788929 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.773978949 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.820403099 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.820461035 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.820506096 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.820527077 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.820557117 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.820585012 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.820650101 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.820704937 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.820732117 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.820745945 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.820775032 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.820805073 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.821005106 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.821047068 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.821072102 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.821084976 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.821114063 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.821132898 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.821410894 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.821450949 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.821492910 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.821511030 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.821533918 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.821572065 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.821686029 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.821733952 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.821774006 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.821791887 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.821815968 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.821839094 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.822066069 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.822108030 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.822133064 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.822144985 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.822171926 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.822191000 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.832458973 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.856646061 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.856694937 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.856736898 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.856755972 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.856786013 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.856812000 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.857325077 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.857369900 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.857397079 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.857409000 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.857435942 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.857454062 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.872782946 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 7, 2024 14:31:51.872838020 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 7, 2024 14:31:51.903547049 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.903573990 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.903650045 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.903666019 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.903719902 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.904120922 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.904169083 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.904186964 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.904201984 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.904247046 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.904247046 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.904530048 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.904580116 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.904609919 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.904623032 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.904648066 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.904669046 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.904767990 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.904810905 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.904856920 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.904874086 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.904896021 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.904916048 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.905333996 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.905385017 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.905414104 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.905426025 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.905452967 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.905478001 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.905858040 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.905901909 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.905922890 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.905935049 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.905960083 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.905978918 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.939249992 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.939275980 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.939352989 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.939374924 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.939434052 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.940002918 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.940047026 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.940077066 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.940088987 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.940118074 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.940138102 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.986093044 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.986125946 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.986181021 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.986196995 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.986223936 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.986242056 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.986624002 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.986675024 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.986752033 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.986766100 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.986911058 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.987178087 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.987229109 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.987255096 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.987267017 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.987289906 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.987309933 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.987600088 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.987647057 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.987679958 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.987693071 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.987777948 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.987795115 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.987935066 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.987981081 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.988023996 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.988043070 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.988066912 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.988086939 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.988192081 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.988240004 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.988262892 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.988276005 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:51.988300085 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:51.988320112 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.022131920 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.022156000 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.022203922 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.022212029 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.022242069 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.022259951 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.023032904 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.023047924 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.023103952 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.023112059 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.023205996 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.069391966 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.069458961 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.069493055 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.069516897 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.069539070 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.069565058 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.069624901 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.069668055 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.069700956 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.069709063 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.069736004 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.069760084 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.069885969 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.069926023 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.069955111 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.069960117 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.069976091 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.069988012 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.070286036 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.070327044 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.070363045 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.070384026 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.070413113 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.070420027 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.070842981 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.070883036 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.070919991 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.070925951 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.070940971 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.070956945 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.071105003 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.071120024 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.071171999 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.071178913 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.071223021 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.083265066 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.104960918 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.104980946 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.105032921 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.105041027 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.105067015 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.105087996 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.105772018 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.105829954 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.105844975 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.105853081 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.105884075 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.105905056 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.151896000 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.151959896 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.151989937 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.152021885 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.152045965 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.152067900 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.152105093 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.152151108 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.152173996 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.152187109 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.152213097 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.152232885 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.152833939 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.152878046 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.152898073 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.152909994 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.152935028 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.152952909 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.153372049 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.153424978 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.153443098 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.153455973 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.153506994 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.153568029 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.153623104 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.153939009 CEST	49740	443	192.168.2.4	185.199.109.133
Oct 7, 2024 14:31:52.153965950 CEST	443	49740	185.199.109.133	192.168.2.4
Oct 7, 2024 14:31:52.393291950 CEST	49738	443	192.168.2.4	140.82.121.3
Oct 7, 2024 14:31:52.393318892 CEST	443	49738	140.82.121.3	192.168.2.4
Oct 7, 2024 14:31:55.033052921 CEST	443	49736	142.250.186.36	192.168.2.4
Oct 7, 2024 14:31:55.033221006 CEST	443	49736	142.250.186.36	192.168.2.4
Oct 7, 2024 14:31:55.033545971 CEST	49736	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:31:56.261538029 CEST	49736	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:31:56.261574984 CEST	443	49736	142.250.186.36	192.168.2.4
Oct 7, 2024 14:31:56.643296957 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 7, 2024 14:31:56.649708986 CEST	80	49723	199.232.214.172	192.168.2.4
Oct 7, 2024 14:31:56.652403116 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 7, 2024 14:32:34.662933111 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:34.663029909 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:34.663153887 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:34.663558006 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:34.663589001 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.330482960 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.330554962 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.332765102 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.332777023 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.333175898 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.345438957 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.391400099 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.495784044 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.495850086 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.495893002 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.495945930 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.495970964 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.495985031 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.496021986 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.570866108 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.570935011 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.570971966 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.570988894 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.571033955 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.571058989 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.578325987 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.578388929 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.578429937 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.578444004 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.578490973 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.652930975 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.652997971 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.653031111 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.653047085 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.653091908 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.654093981 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.654141903 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.654171944 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.654180050 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.654223919 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.655746937 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.655797005 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.655822992 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.655831099 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.655874014 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.660839081 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.660906076 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.660929918 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.660938025 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.660995960 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.737941027 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.738013983 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.738046885 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.738071918 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.738105059 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.738125086 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.738254070 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.738296986 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.738343954 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.738362074 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.738395929 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.738409996 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.739286900 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.739335060 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.739363909 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.739373922 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.739432096 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.739432096 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.740232944 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.740277052 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.740302086 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.740313053 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.740339041 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.740364075 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.743649006 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.743694067 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.743735075 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.743746996 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.743783951 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.743810892 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.766705036 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.766736984 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.766789913 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.766804934 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.766822100 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.766854048 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.766885996 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.766895056 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.766911030 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.766936064 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.766978025 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.767254114 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.767271042 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.767285109 CEST	49750	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.767292023 CEST	443	49750	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.846317053 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.846388102 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.846424103 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.846472979 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.846482038 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.846523046 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.848376989 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.848427057 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.848495007 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.850878954 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.850888968 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.850943089 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.852118969 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.852138996 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.852333069 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.852369070 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.852600098 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.852623940 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.852696896 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.852716923 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.852730989 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.852792978 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.852797031 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:35.852845907 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:35.852863073 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.656332970 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.656424046 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.656688929 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.657105923 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.657125950 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.668493986 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.668523073 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.669488907 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.669502974 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.669811010 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.669853926 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.671066046 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.671073914 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.671694994 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.671725988 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.672692060 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.672704935 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.672971964 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.673011065 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.673542023 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.673557997 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.674268961 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.674287081 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.674995899 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.674998999 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.769821882 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.769849062 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.769921064 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.769933939 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.769973040 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.770324945 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.770348072 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.770359993 CEST	49753	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.770365000 CEST	443	49753	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.770824909 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.770843983 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.770895958 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.770906925 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.770942926 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.770961046 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.771100044 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.771271944 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.771341085 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.771357059 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.771369934 CEST	49752	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.771375895 CEST	443	49752	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.772598028 CEST	49751	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.772614956 CEST	443	49751	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.772804976 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.772865057 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.772927046 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.772947073 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.773001909 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.773051023 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.773459911 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.773607969 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.773684025 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.774142027 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.774169922 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.774341106 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.774928093 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.774946928 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.774952888 CEST	49754	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.774957895 CEST	443	49754	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.776312113 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.776343107 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.776537895 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.776607037 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.776618958 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.776628971 CEST	49755	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.776633024 CEST	443	49755	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.776669979 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.776684046 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.778259993 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.778289080 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.778546095 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.778562069 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.783406019 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.783720016 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.783752918 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.784641027 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.784667015 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.784755945 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.784862041 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.784876108 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.784960032 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.784972906 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:36.785326004 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.785660982 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:36.785669088 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.328217030 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.329000950 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.329035044 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.329530001 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.329535961 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.401599884 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.402842999 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.402842999 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.402884007 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.402898073 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.418540001 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.419338942 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.419373989 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.420016050 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.420022964 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.420197964 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.420663118 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.420672894 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.421272993 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.421279907 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.421473980 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.421817064 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.421829939 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.422257900 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.422261953 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.435116053 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.435295105 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.435362101 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.435414076 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.435429096 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.435439110 CEST	49756	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.435444117 CEST	443	49756	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.438818932 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.438858032 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.439131975 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.439131975 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.439163923 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.508431911 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.508492947 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.508544922 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.508780956 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.508806944 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.508951902 CEST	49757	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.508960962 CEST	443	49757	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.512629032 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.512667894 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.512779951 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.513150930 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.513169050 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.526082039 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.526154041 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.526251078 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.526316881 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.526316881 CEST	49758	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.526333094 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.526341915 CEST	443	49758	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.529314041 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.529349089 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.529439926 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.529639959 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.529650927 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.532921076 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.533077002 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.533133984 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.533166885 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.533180952 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.533195019 CEST	49759	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.533199072 CEST	443	49759	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.536159992 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.536248922 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.536328077 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.536442041 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.536474943 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.547204018 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.547364950 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.547430038 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.547528028 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.547540903 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.547549963 CEST	49760	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.547554016 CEST	443	49760	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.549829960 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.549926043 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:37.550014019 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.550204992 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:37.550246000 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.136600018 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.137931108 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.137953997 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.139399052 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.139403105 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.145414114 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.146121979 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.146133900 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.147317886 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.147322893 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.154251099 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.157839060 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.157865047 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.158972979 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.158977032 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.180259943 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.181494951 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.181519985 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.182331085 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.182336092 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.188759089 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.189220905 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.189264059 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.189939022 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.189949036 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.239799023 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.239845991 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.239896059 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.240087986 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.240108967 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.240120888 CEST	49762	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.240127087 CEST	443	49762	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.245628119 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.245680094 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.245745897 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.246017933 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.246035099 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.260390043 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.260531902 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.260590076 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.261086941 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.261096954 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.261110067 CEST	49763	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.261115074 CEST	443	49763	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.265378952 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.265451908 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.265502930 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.265655994 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.265676975 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.265691996 CEST	49761	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.265698910 CEST	443	49761	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.266243935 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.266283989 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.266354084 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.266530037 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.266540051 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.268657923 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.268709898 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.268784046 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.268963099 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.268984079 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.287563086 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.287642956 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.287693024 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.287805080 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.287817001 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.287826061 CEST	49764	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.287830114 CEST	443	49764	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.291701078 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.291739941 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.291809082 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.292026043 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.292041063 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.294337034 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.294401884 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.294450998 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.294661999 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.294675112 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.294687033 CEST	49765	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.294692039 CEST	443	49765	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.298012018 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.298021078 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.298078060 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.298369884 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.298379898 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.964078903 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.964821100 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.964855909 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.965122938 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.965399027 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.965404034 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.965677977 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.965708017 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:38.966362953 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:38.966367960 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.072019100 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.072247982 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.072349072 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.072498083 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.072515011 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.072545052 CEST	49767	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.072551012 CEST	443	49767	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.072768927 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.072840929 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.072913885 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.073139906 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.073158026 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.073170900 CEST	49766	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.073175907 CEST	443	49766	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.075649977 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.075752974 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.075866938 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.076172113 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.076209068 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.076231956 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.076323986 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.076487064 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.076767921 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.076805115 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.148581982 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.149163008 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.149250031 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.149532080 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.149547100 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.153908968 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.154280901 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.154335976 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.154696941 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.154707909 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.155047894 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.155571938 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.155603886 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.156002045 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.156012058 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.251019955 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.251171112 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.251348019 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.251588106 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.251588106 CEST	49770	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.251617908 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.251630068 CEST	443	49770	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.255291939 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.255322933 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.255409002 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.255719900 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.255731106 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.264966965 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.265047073 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.265156984 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.265347004 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.265347004 CEST	49768	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.265394926 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.265424013 CEST	443	49768	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.268548012 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.268559933 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.268791914 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.268791914 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.268812895 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.269777060 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.269860983 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.269916058 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.269989014 CEST	49769	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.269996881 CEST	443	49769	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.272355080 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.272455931 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.272552967 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.272806883 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.272845030 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.622068882 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.622737885 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.622812986 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.623349905 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.623362064 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.701556921 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.702189922 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.702233076 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.702822924 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.702831030 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.736478090 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.736552000 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.736665010 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.736893892 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.736948967 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.736982107 CEST	49772	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.736999035 CEST	443	49772	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.740654945 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.740706921 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.740799904 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.741054058 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.741069078 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.814497948 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.814603090 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.814730883 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.815124035 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.815145969 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.815161943 CEST	49771	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.815170050 CEST	443	49771	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.819475889 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.819566011 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.819843054 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.821154118 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.821187973 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.911326885 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.911982059 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.912000895 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.912621975 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.912626982 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.918224096 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.918767929 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.918780088 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.919250011 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.919254065 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.929651022 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.930236101 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.930322886 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:39.930732012 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:39.930744886 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.031358957 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.031543970 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.031693935 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.032426119 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.032449007 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.032581091 CEST	49773	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.032586098 CEST	443	49773	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.038543940 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.038624048 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.038774014 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.039180040 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.039215088 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.039741993 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.039899111 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.040378094 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.041054964 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.041054964 CEST	49774	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.041060925 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.041078091 CEST	443	49774	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.042011976 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.042171001 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.042273998 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.042412996 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.042412996 CEST	49775	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.042464018 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.042493105 CEST	443	49775	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.050432920 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.050481081 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.050615072 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.050709963 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.050759077 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.050909042 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.051489115 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.051510096 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.051646948 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.051664114 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.366354942 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.369426966 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.369513988 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.371124983 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.371139050 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.482743025 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.483402967 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.483469963 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.484031916 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.484045982 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.485702038 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.485765934 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.485827923 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.486123085 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.486174107 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.486203909 CEST	49776	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.486218929 CEST	443	49776	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.489991903 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.490034103 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.490236044 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.490505934 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.490520954 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.598582029 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.598756075 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.598871946 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.599013090 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.599057913 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.599087000 CEST	49777	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.599102974 CEST	443	49777	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.605160952 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.605201960 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.605489969 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.605684042 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.605695963 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.686505079 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.687139988 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.687222958 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.687669039 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.687891960 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.687906981 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.688270092 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.688329935 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.688827038 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.688841105 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.694544077 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.695019960 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.695050001 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.695902109 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.695909023 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.797585964 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.797668934 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.797756910 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.798191071 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.798191071 CEST	49778	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.798229933 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.798252106 CEST	443	49778	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.800746918 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.800868988 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.800946951 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.801104069 CEST	49780	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.801126957 CEST	443	49780	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.802166939 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.802196026 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.802304029 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.802434921 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.802440882 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.803503990 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.803546906 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.803617954 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.803827047 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.803842068 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.845109940 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.845278025 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.845354080 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.845551968 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.845567942 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.845578909 CEST	49779	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.845583916 CEST	443	49779	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.848721981 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.848818064 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:40.848921061 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.849155903 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:40.849195004 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.149610043 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.150156975 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.150171041 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.150621891 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.150625944 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.230941057 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.231575966 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.231590033 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.234124899 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.234128952 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.256742954 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.256789923 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.256860018 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.257040024 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.257040024 CEST	49781	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.257052898 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.257060051 CEST	443	49781	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.259963036 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.260068893 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.260159969 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.260317087 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.260354042 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.338974953 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.339040995 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.339137077 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.339318037 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.339330912 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.339340925 CEST	49782	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.339345932 CEST	443	49782	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.342349052 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.342391014 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.342503071 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.342698097 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.342709064 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.427884102 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.428395033 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.428420067 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.428920031 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.428924084 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.438648939 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.439131975 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.439169884 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.439662933 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.439677954 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.503201962 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.503760099 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.503808022 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.504311085 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.504324913 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.531518936 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.531603098 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.531794071 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.532002926 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.532002926 CEST	49783	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.532022953 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.532031059 CEST	443	49783	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.534730911 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.534774065 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.535541058 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.535753965 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.535768032 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.542985916 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.543138981 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.543286085 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.543286085 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.543318987 CEST	49784	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.543339014 CEST	443	49784	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.545903921 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.546016932 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.546102047 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.546401024 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.546488047 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.622163057 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.622302055 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.622392893 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.622520924 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.622575998 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.622610092 CEST	49785	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.622626066 CEST	443	49785	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.625638008 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.625735998 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.625885010 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.626068115 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.626104116 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.939466000 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.941260099 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.941313028 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.946696043 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.946715117 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.976803064 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.978189945 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.978224993 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:41.978837967 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:41.978847980 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.049252987 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.049386978 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.049448967 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.049789906 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.049822092 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.049837112 CEST	49786	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.049844980 CEST	443	49786	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.053473949 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.053545952 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.053631067 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.053833008 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.053858042 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.083771944 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.083903074 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.083972931 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.084041119 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.084064960 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.084079981 CEST	49787	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.084088087 CEST	443	49787	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.089070082 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.089116096 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.089216948 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.089476109 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.089492083 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.179516077 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.181338072 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.181376934 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.182812929 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.182818890 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.255840063 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.256624937 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.256680012 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.257267952 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.257285118 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.282356024 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.282434940 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.282495975 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.284552097 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.284574032 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.284584999 CEST	49788	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.284591913 CEST	443	49788	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.295057058 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.295108080 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.295176983 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.295399904 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.295409918 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.362621069 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.362747908 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.362824917 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.363039970 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.363078117 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.363105059 CEST	49790	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.363118887 CEST	443	49790	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.366508007 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.366568089 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.366635084 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.366801977 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.366808891 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.699470043 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.700431108 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.700450897 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.701077938 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.701083899 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.718905926 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.719821930 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.719850063 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.720576048 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.720582008 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.808720112 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.808808088 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.808868885 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.809118032 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.809140921 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.809154034 CEST	49792	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.809161901 CEST	443	49792	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.813527107 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.813612938 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.813721895 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.813955069 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.813977003 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.823966026 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.824177027 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.824258089 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.824333906 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.824354887 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.824372053 CEST	49793	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.824382067 CEST	443	49793	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.827758074 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.827845097 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.827927113 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.828108072 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.828130007 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.923664093 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.924401045 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.924428940 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:42.925296068 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:42.925301075 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.004138947 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.004656076 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.004695892 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.005083084 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.005089998 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.031785965 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.031976938 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.032037020 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.032160044 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.032191992 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.032207966 CEST	49794	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.032215118 CEST	443	49794	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.035285950 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.035413027 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.035505056 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.035672903 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.035696030 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.113940954 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.114103079 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.114286900 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.114371061 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.114391088 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.114403009 CEST	49795	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.114408016 CEST	443	49795	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.118675947 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.118709087 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.118918896 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.119110107 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.119134903 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.360753059 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.361361027 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.361382961 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.361963034 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.361968994 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.467566967 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.467627048 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.467781067 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.467993975 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.468008995 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.468019009 CEST	49796	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.468024969 CEST	443	49796	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.471381903 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.471465111 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.471636057 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.471812010 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.471828938 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.488847971 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.489373922 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.489456892 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.489892960 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.489907026 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.616947889 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.617103100 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.617182016 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.617662907 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.617662907 CEST	49797	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.617703915 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.617732048 CEST	443	49797	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.620450974 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.620549917 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.620788097 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.620934010 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.620954990 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.707588911 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.708657980 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.708707094 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.709717035 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.709729910 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.807612896 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.808520079 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.808547020 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.809571981 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.809578896 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.813733101 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.813889027 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.813961983 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.814198017 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.814240932 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.814275980 CEST	49798	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.814292908 CEST	443	49798	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.818434954 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.818470955 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.818550110 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.818722010 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.818727970 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.915580988 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.915688992 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.915735960 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.916924953 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.916935921 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.916953087 CEST	49799	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.916959047 CEST	443	49799	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.921806097 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.921847105 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:43.921916008 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.922235966 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:43.922246933 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.118933916 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.119632006 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.119682074 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.120209932 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.120219946 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.238640070 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.239408016 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.239471912 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.239505053 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.239523888 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.239532948 CEST	49800	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.239538908 CEST	443	49800	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.243184090 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.243279934 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.243371010 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.243568897 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.243608952 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.279412031 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.279881001 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.279916048 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.280452013 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.280457020 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.393932104 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.394098997 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.394157887 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.394387960 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.394407988 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.394422054 CEST	49801	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.394428015 CEST	443	49801	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.397325993 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.397356987 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.397413015 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.397533894 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.397547007 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.442105055 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.442570925 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.442599058 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.443018913 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.443025112 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.542956114 CEST	49806	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:32:44.543009996 CEST	443	49806	142.250.186.36	192.168.2.4
Oct 7, 2024 14:32:44.543076038 CEST	49806	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:32:44.543418884 CEST	49806	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:32:44.543431997 CEST	443	49806	142.250.186.36	192.168.2.4
Oct 7, 2024 14:32:44.544646978 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.545120955 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.545142889 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.545783043 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.545792103 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.600346088 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.600508928 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.600579977 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.600788116 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.600810051 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.600821972 CEST	49802	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.600828886 CEST	443	49802	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.605254889 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.605314970 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.605392933 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.605580091 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.605602980 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.652345896 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.652502060 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.652569056 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.652698994 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.652720928 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.652730942 CEST	49803	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.652735949 CEST	443	49803	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.660931110 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.661024094 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.661115885 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.661263943 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.661297083 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.715744019 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 7, 2024 14:32:44.720979929 CEST	80	49724	199.232.214.172	192.168.2.4
Oct 7, 2024 14:32:44.721034050 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 7, 2024 14:32:44.896620035 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:44.928505898 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:44.928589106 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.027828932 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.038526058 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.038527966 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.038543940 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.038556099 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.041326046 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.041332960 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.140064955 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.140120983 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.140491009 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.140491009 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.140544891 CEST	49804	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.140568018 CEST	443	49804	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.143634081 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.143678904 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.143712044 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.143728971 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.143822908 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.143824100 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.143876076 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.143876076 CEST	49805	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.143893003 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.143903971 CEST	443	49805	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.144490004 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.144506931 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.145858049 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.145870924 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.146034002 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.146034002 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.146054029 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.146374941 CEST	443	49806	142.250.186.36	192.168.2.4
Oct 7, 2024 14:32:45.146750927 CEST	49806	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:32:45.146816015 CEST	443	49806	142.250.186.36	192.168.2.4
Oct 7, 2024 14:32:45.147274017 CEST	443	49806	142.250.186.36	192.168.2.4
Oct 7, 2024 14:32:45.147672892 CEST	49806	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:32:45.147756100 CEST	443	49806	142.250.186.36	192.168.2.4
Oct 7, 2024 14:32:45.195118904 CEST	49806	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:32:45.225833893 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.226577997 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.226617098 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.226808071 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.226814032 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.316216946 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.317090988 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.317090988 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.317168951 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.317203999 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.332443953 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.333339930 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.333390951 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.334284067 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.334292889 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.337977886 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.338119984 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.338618994 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.342720032 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.342720032 CEST	49789	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.342750072 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.342761993 CEST	443	49789	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.345987082 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.346024036 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.346256018 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.346256018 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.346288919 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.425017118 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.425101042 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.425226927 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.425415039 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.425415039 CEST	49808	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.425445080 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.425467014 CEST	443	49808	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.427948952 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.427993059 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:45.428261042 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.428369045 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:45.428383112 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.516674042 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.516822100 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.516892910 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.517165899 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.517235041 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.517278910 CEST	49807	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.517297029 CEST	443	49807	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.520876884 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.520915031 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.520982981 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.521116018 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.521122932 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.630083084 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.630561113 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.630636930 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.631081104 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.631093979 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.698035002 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.702467918 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.702557087 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.702961922 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.702976942 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.704742908 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.705090046 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.705143929 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.705406904 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.705419064 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.708880901 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.709250927 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.709266901 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.709651947 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.709656954 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.740770102 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.740946054 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.741007090 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.741074085 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.741075039 CEST	49809	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.741113901 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.741137028 CEST	443	49809	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.745858908 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.745893002 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.745959044 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.746069908 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.746074915 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.806734085 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.806798935 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.806854963 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.807425976 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.807425976 CEST	49811	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.807462931 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.807487011 CEST	443	49811	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.810159922 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.810189962 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.810252905 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.810445070 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.810460091 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.815521002 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.815568924 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.815608025 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.815695047 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.815706968 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.815716028 CEST	49810	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.815721035 CEST	443	49810	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.817770004 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.817794085 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.817842960 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.817954063 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.817961931 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.819253922 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.819433928 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.819484949 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.819534063 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.819542885 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.819555044 CEST	49812	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.819559097 CEST	443	49812	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.821572065 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.821664095 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:46.821739912 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.821834087 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:46.821856022 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.151892900 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.157397032 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.157397032 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.157424927 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.157429934 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.263267040 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.263421059 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.263931990 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.264055014 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.264055014 CEST	49813	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.264069080 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.264075994 CEST	443	49813	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.267530918 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.267642021 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.267875910 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.267875910 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.267978907 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.387382030 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.390902996 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.390902996 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.390924931 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.390930891 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.440743923 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.446567059 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.446619034 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.446674109 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.446688890 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.451426983 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.452327013 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.452327013 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.452418089 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.452450991 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.471623898 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.472893953 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.472923040 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.476481915 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.476486921 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.494014025 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.494177103 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.494342089 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.494529963 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.494529963 CEST	49814	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.494544029 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.494551897 CEST	443	49814	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.500483990 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.500514984 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.506726027 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.506831884 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.506840944 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.559675932 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.559864998 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.560092926 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.560094118 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.560094118 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.562124968 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.562160969 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.562381983 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.562381983 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.562413931 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.567250967 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.567305088 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.567461967 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.567461967 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.567637920 CEST	49815	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.567652941 CEST	443	49815	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.569231033 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.569324017 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.569478989 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.569564104 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.569602966 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.600917101 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.600972891 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.601597071 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.601597071 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.603271961 CEST	49816	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.603281975 CEST	443	49816	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.603389978 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.603477001 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.603701115 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.603771925 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.603797913 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.866331100 CEST	49817	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.866365910 CEST	443	49817	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.912892103 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.914107084 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.914107084 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:47.914145947 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:47.914161921 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.024801016 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.024955034 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.025042057 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.025157928 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.025209904 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.025242090 CEST	49818	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.025258064 CEST	443	49818	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.027990103 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.028031111 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.031474113 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.031636000 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.031650066 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.151618958 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.152360916 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.152371883 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.153701067 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.153704882 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.192306042 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.192986965 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.193031073 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.193284988 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.193291903 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.229695082 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.230143070 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.230182886 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.230541945 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.230547905 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.255785942 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.256316900 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.256333113 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.256565094 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.256720066 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.256726027 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.257306099 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.257371902 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.257428885 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.257446051 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.257455111 CEST	49819	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.257458925 CEST	443	49819	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.262636900 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.262680054 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.262759924 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.262868881 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.262876987 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.302804947 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.302942038 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.303122044 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.303122044 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.303122044 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.307626963 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.307672977 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.307754993 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.308000088 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.308015108 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.335445881 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.335501909 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.335660934 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.335743904 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.335768938 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.335824013 CEST	49821	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.335830927 CEST	443	49821	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.338875055 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.338928938 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.338998079 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.339129925 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.339165926 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.368632078 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.368681908 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.368799925 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.370044947 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.370045900 CEST	49822	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.370090961 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.370120049 CEST	443	49822	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.372289896 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.372327089 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.372390985 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.372558117 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.372570992 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.603746891 CEST	49820	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.603775024 CEST	443	49820	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.668271065 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.668737888 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.668761015 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.669305086 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.669310093 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.775558949 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.775718927 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.775875092 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.775875092 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.775875092 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.779207945 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.779238939 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.779303074 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.779460907 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.779472113 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.928812027 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.929322958 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.929348946 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.929769039 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.929773092 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.946192026 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.946595907 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.946629047 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.946933031 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.946938992 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.996109009 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.997139931 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.997139931 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:48.997185946 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:48.997205973 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.001357079 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.002008915 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.002008915 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.002032995 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.002043962 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.053836107 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.054003954 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.054158926 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.054158926 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.054218054 CEST	49824	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.054239988 CEST	443	49824	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.056083918 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.056240082 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.058082104 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.058183908 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.058235884 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.058235884 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.058235884 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.058294058 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.060272932 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.060272932 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.060332060 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.060365915 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.060503006 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.060549021 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.060563087 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.087506056 CEST	49823	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.087534904 CEST	443	49823	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.107072115 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.107147932 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.107527018 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.107562065 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.107584953 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.107723951 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.108582973 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.108618021 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.108649969 CEST	49827	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.108660936 CEST	443	49827	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.109828949 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.109828949 CEST	49826	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.109848976 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.109858990 CEST	443	49826	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.112500906 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.112536907 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.112618923 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.112643003 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.112674952 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.112692118 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.112823009 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.112838030 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.113224983 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.113239050 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.359719992 CEST	49825	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.359751940 CEST	443	49825	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.423715115 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.424321890 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.424350023 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.424969912 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.424982071 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.535625935 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.535681009 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.535804033 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.535873890 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.536092997 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.536139965 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.536163092 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.536222935 CEST	49828	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.536230087 CEST	443	49828	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.539438963 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.539520979 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.539892912 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.539892912 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.539977074 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.692032099 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.693089008 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.693089962 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.693181038 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.693214893 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.745239019 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.746113062 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.746113062 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.746155024 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.746171951 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.790191889 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.790232897 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.791543007 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.791559935 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.791872025 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.791891098 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.792207003 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.792208910 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.792212009 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.792213917 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.798006058 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.798214912 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.798437119 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.798526049 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.798526049 CEST	49830	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.798572063 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.798609018 CEST	443	49830	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.801060915 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.801100969 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.801289082 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.801289082 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.801318884 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.862083912 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.863898039 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.864013910 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.864013910 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.864099979 CEST	49829	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.864137888 CEST	443	49829	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.866272926 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.866297960 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.866554022 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.866554022 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.866576910 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.903184891 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.903199911 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.903405905 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.903417110 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.903523922 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.903527975 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.903527975 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.903542042 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.903578043 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.903578043 CEST	49831	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.903585911 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.903592110 CEST	443	49831	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.905421972 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.905453920 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.905654907 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.905654907 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.905683041 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.909194946 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.909214973 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.909392118 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.909403086 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.909466028 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.909499884 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.909499884 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.909512997 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.909591913 CEST	49832	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.909596920 CEST	443	49832	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.911288977 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.911333084 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:49.911581993 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.911581993 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:49.911622047 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.172542095 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.173083067 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.173149109 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.173527956 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.173541069 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.463376999 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.463468075 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.463542938 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.463608027 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.463643074 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.463706017 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.468311071 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.468341112 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.468353987 CEST	49833	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.468360901 CEST	443	49833	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.471163988 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.471211910 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.471277952 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.471406937 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.471419096 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.718310118 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.718957901 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.719033003 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.719113111 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.720841885 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.720864058 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.721334934 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.721453905 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.721473932 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.721719980 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.722078085 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.722083092 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.722868919 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.722951889 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.724147081 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.724164009 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.725013971 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.725045919 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.726172924 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.726180077 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.974311113 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.974471092 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.974664927 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.974951982 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.974962950 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.974992990 CEST	49835	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.974997997 CEST	443	49835	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.978313923 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.978383064 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.978554964 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.978676081 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.978696108 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.978952885 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.979006052 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.979183912 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.979217052 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.979217052 CEST	49837	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.979233980 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.979244947 CEST	443	49837	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.979931116 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.980087042 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.980613947 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.980613947 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.980740070 CEST	49834	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.980781078 CEST	443	49834	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.981182098 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.981267929 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.981453896 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.981575966 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.981612921 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.981692076 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.981746912 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.981977940 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.982023001 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.982023001 CEST	49836	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.982047081 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.982069016 CEST	443	49836	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.982945919 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.982992887 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.983159065 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.983159065 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.983195066 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.983824968 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.983836889 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:50.983975887 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.984078884 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:50.984102964 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.357835054 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.360475063 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.360512972 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.364526987 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.364546061 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.724833012 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.724961996 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.725184917 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.725363970 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.725363970 CEST	49838	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.725403070 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.725415945 CEST	443	49838	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.729628086 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.729671955 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.729924917 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.729924917 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.729954958 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.799613953 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.800185919 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.800210953 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.800749063 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.800755024 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.800913095 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.801490068 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.801490068 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.801507950 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.801513910 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.815288067 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.815726995 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.815752029 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.816015005 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.816020012 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.911482096 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.911602974 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.911767006 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.912446976 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.912463903 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.912487984 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.912498951 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.912503004 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.912679911 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.912699938 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.912735939 CEST	49842	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.912740946 CEST	443	49842	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.912749052 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.913043976 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.913146973 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.913182020 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.913182974 CEST	49841	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.913187027 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.913192987 CEST	443	49841	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.915774107 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.915777922 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.915865898 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.915870905 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.916024923 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.916033983 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.916104078 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.916122913 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.916131020 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.916151047 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.935679913 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.935833931 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.935897112 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.935916901 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.935930967 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.935940027 CEST	49839	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.935944080 CEST	443	49839	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.937997103 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.938007116 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:51.938072920 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.938219070 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:51.938230038 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.398606062 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.399369955 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.399408102 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.399956942 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.399962902 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.509854078 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.510524035 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.510591030 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.510639906 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.510656118 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.510665894 CEST	49843	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.510670900 CEST	443	49843	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.513952017 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.514050961 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.514122009 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.514292955 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.514332056 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.518474102 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.518579960 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.518631935 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.518697977 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.518702030 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.518711090 CEST	49840	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.518713951 CEST	443	49840	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.520910025 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.520939112 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.520993948 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.521152973 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.521163940 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.545732975 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.546288013 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.546381950 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.546551943 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.546576977 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.557023048 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.557460070 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.557480097 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.557843924 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.557847023 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.575962067 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.576314926 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.576327085 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.576692104 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.576694965 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.676346064 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.676493883 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.676561117 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.676664114 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.676676989 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.676687956 CEST	49845	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.676692963 CEST	443	49845	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.679831028 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.679863930 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.679918051 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.680372000 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.680387020 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.696999073 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.697067976 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.697125912 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.697145939 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.697179079 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.697227955 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.697334051 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.697351933 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.697374105 CEST	49846	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.697385073 CEST	443	49846	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.699841976 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.699851036 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:52.699914932 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.700095892 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:52.700109959 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.136451006 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.136509895 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.136634111 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.136754036 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.136809111 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.136809111 CEST	49844	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.136831999 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.136852026 CEST	443	49844	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.139617920 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.139641047 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.139908075 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.139908075 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.139935017 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.337491035 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.338538885 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.338538885 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.338574886 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.338591099 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.344043016 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.344631910 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.344667912 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.344688892 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.344929934 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.344934940 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.344943047 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.344973087 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.345375061 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.345397949 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.396111012 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.396512985 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.396534920 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.396758080 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.396776915 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.451200008 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.451241970 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.451461077 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.451489925 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.451489925 CEST	49847	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.451504946 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.451514006 CEST	443	49847	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.454070091 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.454143047 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.454480886 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.454480886 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.454557896 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.457056046 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.458331108 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.458512068 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.458512068 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.458538055 CEST	49848	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.458544970 CEST	443	49848	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.459790945 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.459836960 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.460002899 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.460046053 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.460046053 CEST	49849	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.460058928 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.460083008 CEST	443	49849	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.462483883 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.462483883 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.462544918 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.462560892 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.462662935 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.462662935 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.462816954 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.462816954 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.462837934 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.462855101 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.602556944 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.602607012 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.602663040 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.602785110 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.602786064 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.603271008 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.603292942 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.603441954 CEST	49850	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.603449106 CEST	443	49850	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.607343912 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.607400894 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.607594967 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.607808113 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.607827902 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.896142960 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.897361040 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.897361040 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:53.897392988 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:53.897402048 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.004412889 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.004765987 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.004826069 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.004895926 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.004909039 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.004920006 CEST	49851	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.004925013 CEST	443	49851	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.009533882 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.009558916 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.009633064 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.010037899 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.010049105 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.129290104 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.130017042 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.130042076 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.130860090 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.130867004 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.155004978 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.155996084 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.156009912 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.157777071 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.157782078 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.167314053 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.174228907 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.174256086 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.176434994 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.176448107 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.242620945 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.242690086 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.242750883 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.246735096 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.246750116 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.246769905 CEST	49852	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.246774912 CEST	443	49852	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.254348040 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.257566929 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.257581949 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.258796930 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.258800983 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.262236118 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.262300014 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.262365103 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.263782024 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.263832092 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.263906002 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.264586926 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.264605999 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.264636040 CEST	49853	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.264642000 CEST	443	49853	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.267054081 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.267072916 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.273991108 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.274269104 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.274342060 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.274353027 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.274374962 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.274513006 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.274876118 CEST	49854	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.274880886 CEST	443	49854	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.283830881 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.283842087 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.283915043 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.284606934 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.284620047 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.287576914 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.287620068 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.287699938 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.287942886 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.287955999 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.360748053 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.360800028 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.360872030 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.362066984 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.362112999 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.362142086 CEST	49855	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.362159014 CEST	443	49855	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.375216007 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.375262976 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.375340939 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.376808882 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.376841068 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.667211056 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.668011904 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.668029070 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.668880939 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.668886900 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.794759035 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.795614958 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.795660019 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.795672894 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.795730114 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.795770884 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.795783997 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.795797110 CEST	49856	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.795802116 CEST	443	49856	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.799206972 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.799232960 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.799364090 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.799552917 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.799567938 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.918217897 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.919080019 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.919142008 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.919661999 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.919677019 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.937403917 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.937743902 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.937774897 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:54.938138962 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:54.938148975 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.040160894 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.040210009 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.040478945 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.040478945 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.040555954 CEST	49857	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.040595055 CEST	443	49857	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.043400049 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.043457031 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.043642044 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.043642044 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.043692112 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.058866024 CEST	443	49806	142.250.186.36	192.168.2.4
Oct 7, 2024 14:32:55.058916092 CEST	443	49806	142.250.186.36	192.168.2.4
Oct 7, 2024 14:32:55.059061050 CEST	49806	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:32:55.082252979 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.082400084 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.082513094 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.082513094 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.082514048 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.084623098 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.084697008 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.084903002 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.084903002 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.084980965 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.135093927 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.135453939 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.135476112 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.135732889 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.135736942 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.387732983 CEST	49858	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.387774944 CEST	443	49858	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.470530033 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.470593929 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.470905066 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.470905066 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.470966101 CEST	49859	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.470978975 CEST	443	49859	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.473987103 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.474037886 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.474172115 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.474348068 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.474364042 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.660510063 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.661552906 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.661552906 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.661587954 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.661597013 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.684679031 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.685036898 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.685065031 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.686600924 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.686606884 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.721472025 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.722127914 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.722127914 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.722193003 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.722215891 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.779649973 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.781852007 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.782351017 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.782351017 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.782351017 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.785382986 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.785413980 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.785572052 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.785770893 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.785782099 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.793078899 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.793536901 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.793674946 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.793674946 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.793905973 CEST	49862	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.793929100 CEST	443	49862	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.795661926 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.795686960 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.795875072 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.795875072 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.795901060 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.826812983 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.826868057 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.827076912 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.827078104 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.827078104 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.828799963 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.828833103 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:55.829021931 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.829021931 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:55.829056025 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.088841915 CEST	49861	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.088869095 CEST	443	49861	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.128007889 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.128561974 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.128596067 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.129040956 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.129055977 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.135209084 CEST	49863	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.135235071 CEST	443	49863	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.235169888 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.235239029 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.235285997 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.235301971 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.235352039 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.235392094 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.236228943 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.236246109 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.236257076 CEST	49864	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.236262083 CEST	443	49864	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.240528107 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.240573883 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.240633965 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.241027117 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.241040945 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.251430035 CEST	49806	443	192.168.2.4	142.250.186.36
Oct 7, 2024 14:32:56.251444101 CEST	443	49806	142.250.186.36	192.168.2.4
Oct 7, 2024 14:32:56.477469921 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.478072882 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.478091955 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.478507996 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.478513002 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.525669098 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.526004076 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.526021004 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.526410103 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.526416063 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.582294941 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.586148977 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.586167097 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.586751938 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.586762905 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.602428913 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.602598906 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.602648020 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.603349924 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.603365898 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.603375912 CEST	49865	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.603382111 CEST	443	49865	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.607677937 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.607774973 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.607858896 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.607969999 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.607990026 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.641921997 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.641990900 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.642047882 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.642199993 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.642206907 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.642215014 CEST	49866	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.642218113 CEST	443	49866	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.645620108 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.645709038 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.645795107 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.645903111 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.645937920 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.700237989 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.700393915 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.700453997 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.701189995 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.701201916 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.701211929 CEST	49867	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.701217890 CEST	443	49867	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.713048935 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.713144064 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.713217974 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.718919992 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.718956947 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.927321911 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.928344965 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.928436041 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.928910017 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.928926945 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.948422909 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.949363947 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.949363947 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:56.949397087 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:56.949405909 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.034408092 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.034498930 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.034559011 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.034749031 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.034840107 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.034840107 CEST	49868	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.034883022 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.034914970 CEST	443	49868	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.037672043 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.037709951 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.037924051 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.037986994 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.038002968 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.086776018 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.086834908 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.086926937 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.087064028 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.087064981 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.087208986 CEST	49860	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.087223053 CEST	443	49860	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.089375019 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.089395046 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.089591980 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.089591980 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.089615107 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.282789946 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.283363104 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.283397913 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.284252882 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.284260035 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.326200008 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.327169895 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.327169895 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.327214003 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.327227116 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.356484890 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.357038021 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.357069969 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.357462883 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.357472897 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.398777962 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.398919106 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.399071932 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.399112940 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.399112940 CEST	49869	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.399136066 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.399147034 CEST	443	49869	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.401689053 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.401725054 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.402807951 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.402873993 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.402879953 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.439340115 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.439418077 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.439593077 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.439593077 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.439593077 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.443406105 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.443453074 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.443679094 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.443679094 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.443726063 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.464555025 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.464629889 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.464900970 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.464901924 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.464991093 CEST	49871	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.465029001 CEST	443	49871	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.466757059 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.466823101 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.467070103 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.467070103 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.467145920 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.710150003 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.711163044 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.711183071 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.711405993 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.711410046 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.747442961 CEST	49870	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.747473001 CEST	443	49870	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.773495913 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.774271011 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.774306059 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.776526928 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.776537895 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.838812113 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.838937998 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.839036942 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.839159966 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.839159966 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.839314938 CEST	49872	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.839329004 CEST	443	49872	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.842165947 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.842180967 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.842375994 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.842428923 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.842432976 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.883657932 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.883755922 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.884984016 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.884984970 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.885749102 CEST	49873	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.885762930 CEST	443	49873	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.887892008 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.887903929 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:57.888221025 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.888221025 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:57.888241053 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.073729038 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.090768099 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.090785027 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.092107058 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.092128038 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.106960058 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.109807968 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.109889984 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.110968113 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.110981941 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.114845991 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.115297079 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.115310907 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.115864038 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.115869045 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.204890966 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.204962015 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.205018997 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.205045938 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.205090046 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.205141068 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.205183029 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.205200911 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.205224991 CEST	49874	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.205235958 CEST	443	49874	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.208121061 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.208188057 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.208266020 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.208472013 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.208508015 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.230519056 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.230540991 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.230575085 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.230607986 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.230622053 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.230669022 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.230691910 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.230736971 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.230742931 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.230760098 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.230773926 CEST	49875	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.230778933 CEST	443	49875	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.230787992 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.230920076 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.230946064 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.230971098 CEST	49876	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.230983973 CEST	443	49876	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.233741999 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.233788013 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.233846903 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.233931065 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.233985901 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.234000921 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.234018087 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.234105110 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.234268904 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.234299898 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.511519909 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.512047052 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.512058973 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.512579918 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.512583971 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.543523073 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.543977976 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.543989897 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.544400930 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.544404984 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.671832085 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.671912909 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.671967983 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.672167063 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.672173977 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.672182083 CEST	49877	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.672185898 CEST	443	49877	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.675299883 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.675405025 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.675491095 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.675651073 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.675689936 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.687710047 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.688446045 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.688497066 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.688503981 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.688514948 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.688572884 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.688626051 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.688631058 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.688641071 CEST	49878	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.688643932 CEST	443	49878	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.691498041 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.691540003 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.691617966 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.691771030 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.691792011 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.865318060 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.865789890 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.865849018 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.866214037 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.866226912 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.880810022 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.881139994 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.881176949 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.881504059 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.881516933 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.894464970 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.894809961 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.894898891 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.895173073 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.895188093 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.973018885 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.973660946 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.973771095 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.973771095 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.973937988 CEST	49879	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.973967075 CEST	443	49879	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.976450920 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.976470947 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.976672888 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.976672888 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.976692915 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.994704962 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.997376919 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.999593973 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.999912977 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.999943972 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:58.999983072 CEST	49880	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:58.999994040 CEST	443	49880	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.002782106 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.002805948 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.002820015 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.002877951 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.002911091 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.002988100 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.003058910 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.003072977 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.003104925 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.003106117 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.003221989 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.003221989 CEST	49881	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.003264904 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.003298044 CEST	443	49881	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.006299973 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.006320953 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.006510973 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.006634951 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.006660938 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.321154118 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.321679115 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.321708918 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.322132111 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.322138071 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.332350016 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.333025932 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.333132982 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.333342075 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.333357096 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.427396059 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.427489996 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.427787066 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.427788019 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.427957058 CEST	49883	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.427979946 CEST	443	49883	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.430509090 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.430546045 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.430798054 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.430798054 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.430820942 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.441509962 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.441584110 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.441775084 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.441776037 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.441776037 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.443700075 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.443726063 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.443885088 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.443885088 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.443902016 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.614411116 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.615431070 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.615449905 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.615621090 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.615626097 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.639924049 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.640523911 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.640543938 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.640829086 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.640835047 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.647092104 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.647738934 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.647738934 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.647746086 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.647758007 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.719604015 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.719640970 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.719702959 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.719813108 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.719980001 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.720002890 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.720029116 CEST	49884	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.720033884 CEST	443	49884	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.722732067 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.722769976 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.723076105 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.723076105 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.723109961 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.743352890 CEST	49882	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.743427992 CEST	443	49882	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.753601074 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.753806114 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.753909111 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.753922939 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.754012108 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.754012108 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.754055977 CEST	49886	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.754065990 CEST	443	49886	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.756195068 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.756233931 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.756369114 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.756478071 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.756513119 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.809669018 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.809842110 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.809952974 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.809952974 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.810379982 CEST	49885	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.810395956 CEST	443	49885	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.811707020 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.811728001 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 7, 2024 14:32:59.811886072 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.811953068 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:32:59.811960936 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.065947056 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.066549063 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.066572905 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.067066908 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.067070961 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.099874973 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.100430012 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.100446939 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.100944996 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.100949049 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.210999012 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.211229086 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.211297989 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.212563992 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.212580919 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.212589979 CEST	49888	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.212594986 CEST	443	49888	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.215290070 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.215337038 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.215435028 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.215593100 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.215610027 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.228703976 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.228842020 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.228945971 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.228972912 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.228981018 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.228991032 CEST	49887	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.228995085 CEST	443	49887	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.231292009 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.231379986 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.231481075 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.231652975 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.231690884 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.376382113 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.377000093 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.377080917 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.377477884 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.377492905 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.411300898 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.411809921 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.411840916 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.412266016 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.412276030 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.450490952 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.450959921 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.450975895 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.451353073 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.451358080 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.486783028 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.486870050 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.487015009 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.487097025 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.487128973 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.487165928 CEST	49889	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.487179995 CEST	443	49889	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.489855051 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.489938974 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.490010977 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.490143061 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.490173101 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.519692898 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.519763947 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.519828081 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.519886017 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.519918919 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.520001888 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.520051956 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.520051956 CEST	49890	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.520083904 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.520106077 CEST	443	49890	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.522346973 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.522392035 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.522449970 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.522622108 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.522638083 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.558141947 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.559003115 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.559089899 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.559123993 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.559129000 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.559148073 CEST	49891	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.559150934 CEST	443	49891	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.561182022 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.561242104 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.561311960 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.561460018 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.561491966 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.849867105 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.850399017 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.850436926 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.850857973 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.850873947 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.909064054 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.909563065 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.909611940 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.909996033 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.910005093 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.952749014 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.952811003 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.952909946 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.952945948 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.953001976 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.953213930 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.953213930 CEST	49892	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.953237057 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.953247070 CEST	443	49892	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.956104040 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.956142902 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:00.956290960 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.956501961 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:00.956512928 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.019560099 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.020519018 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.020621061 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.020621061 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.020668030 CEST	49893	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.020689011 CEST	443	49893	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.023195982 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.023227930 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.023361921 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.023423910 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.023431063 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.152853966 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.153803110 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.153804064 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.153832912 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.153841019 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.169926882 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.170691013 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.170691013 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.170733929 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.170747995 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.190491915 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.191211939 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.191212893 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.191287994 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.191318989 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.257797003 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.258069038 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.258140087 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.258196115 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.258196115 CEST	49895	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.258210897 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.258219957 CEST	443	49895	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.261037111 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.261090994 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.261214018 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.261322975 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.261331081 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.277715921 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.277801991 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.280675888 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.280811071 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.280811071 CEST	49894	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.280827045 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.280841112 CEST	443	49894	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.283438921 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.283464909 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.283849001 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.283849001 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.283874035 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.310070992 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.310477972 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.310573101 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.310662031 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.310682058 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.310730934 CEST	49896	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.310739040 CEST	443	49896	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.314407110 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.314498901 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.315030098 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.315099001 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.315121889 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.612456083 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.612941980 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.612963915 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.613423109 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.613426924 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.697069883 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.697577000 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.697613955 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.698101044 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.698107958 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.719439983 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.719683886 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.720649004 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.720685959 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.720685959 CEST	49897	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.720704079 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.720715046 CEST	443	49897	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.723313093 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.723424911 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.723567009 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.724028111 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.724061966 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.803128004 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.803215027 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.803853989 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.803853989 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.803888083 CEST	49898	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.803904057 CEST	443	49898	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.808218002 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.808274031 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.808751106 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.808751106 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.808803082 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.889883995 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.890436888 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.890515089 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.890943050 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.890957117 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.942419052 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.943104029 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.943130016 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.943609953 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.943615913 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.958969116 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.959440947 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.959474087 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:01.959882021 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:01.959888935 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.000678062 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.000840902 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.000916004 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.001024008 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.001075983 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.001106024 CEST	49899	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.001123905 CEST	443	49899	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.003972054 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.004069090 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.004153013 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.004345894 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.004384995 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.051071882 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.051199913 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.051314116 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.051429987 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.051464081 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.051517963 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.051533937 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.051575899 CEST	49900	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.051580906 CEST	443	49900	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.054032087 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.054080963 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.054137945 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.054395914 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.054420948 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.066931009 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.066988945 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.067058086 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.067226887 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.067272902 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.067301989 CEST	49901	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.067317963 CEST	443	49901	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.069262981 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.069291115 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.069338083 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.069565058 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.069577932 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.415122986 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.416368961 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.416404963 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.417172909 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.417181969 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.462544918 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.463241100 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.463289976 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.463670015 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.463677883 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.526665926 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.526803017 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.526998043 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.527081013 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.527081013 CEST	49902	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.527123928 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.527151108 CEST	443	49902	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.530105114 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.530210972 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.530284882 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.530437946 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.530474901 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.610618114 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.610759020 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.610819101 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.610960007 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.610990047 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.611004114 CEST	49903	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.611011028 CEST	443	49903	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.613857031 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.613954067 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.614052057 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.614272118 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.614310980 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.698807955 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.699362040 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.699445963 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.699892044 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.699914932 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.726902008 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.727452993 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.727487087 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.727943897 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.727960110 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.737540007 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.737965107 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.737999916 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.738492966 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.738504887 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.808290958 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.808350086 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.808412075 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.808456898 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.808489084 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.808537006 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.808911085 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.808932066 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.808948994 CEST	49904	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.808955908 CEST	443	49904	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.812868118 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.812915087 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.812994003 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.813220024 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.813235998 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.833266973 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.833573103 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.833626986 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.833661079 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.833688021 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.833734035 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.833749056 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.833761930 CEST	49906	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.833766937 CEST	443	49906	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.838816881 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.838844061 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.838903904 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.839109898 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.839118958 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.845148087 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.845185995 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.845237970 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.845238924 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.845293045 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.845510960 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.845516920 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.845525980 CEST	49905	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.845530033 CEST	443	49905	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.848501921 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.848555088 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:02.848639011 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.848897934 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:02.848912001 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.203960896 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.204571009 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.204642057 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.205205917 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.205215931 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.278140068 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.278644085 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.278724909 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.279180050 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.279201031 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.312118053 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.312438965 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.312561989 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.312606096 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.312628031 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.312640905 CEST	49907	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.312648058 CEST	443	49907	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.316330910 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.316365957 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.316437960 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.316639900 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.316653967 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.389559984 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.389628887 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.389736891 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.389815092 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.389882088 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.389934063 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.389972925 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.389972925 CEST	49908	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.389996052 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.390014887 CEST	443	49908	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.395409107 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.395447969 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.395749092 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.395749092 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.395783901 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.480907917 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.481508017 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.481523037 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.482218981 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.482223034 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.495640993 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.496223927 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.496244907 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.496805906 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.496819019 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.506279945 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.506880999 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.506970882 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.507286072 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.507302999 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.601866007 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.601886034 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.601942062 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.602013111 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.602013111 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.603034973 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.603049994 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.603080034 CEST	49910	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.603085995 CEST	443	49910	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.607124090 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.607153893 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.607228994 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.607525110 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.607538939 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.607551098 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.607928038 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.607994080 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.608072996 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.608072996 CEST	49909	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.608083963 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.608089924 CEST	443	49909	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.610716105 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.610749960 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.610835075 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.611017942 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.611027002 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.624188900 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.624223948 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.624279022 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.624325991 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.624325991 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.624569893 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.624608994 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.624636889 CEST	49911	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.624651909 CEST	443	49911	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.627439022 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.627466917 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.627553940 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.627685070 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.627693892 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.943514109 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.944113016 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.944144964 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:03.944818974 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:03.944823980 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.024364948 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.025305986 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.025321960 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.026535034 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.026539087 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.047204018 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.048227072 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.048288107 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.048288107 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.048337936 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.048396111 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.048412085 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.048424959 CEST	49912	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.048429966 CEST	443	49912	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.051723957 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.051783085 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.051882982 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.052120924 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.052135944 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.131552935 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.132117033 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.132174015 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.132257938 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.132277012 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.132301092 CEST	49913	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.132306099 CEST	443	49913	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.136137009 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.136265039 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.136375904 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.136621952 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.136657953 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.232983112 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.233483076 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.233506918 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.234311104 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.234314919 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.245978117 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.246560097 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.246594906 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.247152090 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.247163057 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.284703970 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.285075903 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.285104036 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.285784960 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.285789967 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.338408947 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.338957071 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.339010000 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.339160919 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.339169025 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.339195013 CEST	49914	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.339199066 CEST	443	49914	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.342619896 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.342658043 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.342735052 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.342984915 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.342998981 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.357690096 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.357815981 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.357922077 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.357950926 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.357950926 CEST	49915	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.357965946 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.357974052 CEST	443	49915	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.363142967 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.363162041 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.363229036 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.363460064 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.363471985 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.394370079 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.396193027 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.396248102 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.396258116 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.396296024 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.396362066 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.396532059 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.396543026 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.396550894 CEST	49916	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.396554947 CEST	443	49916	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.401738882 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.401760101 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.401839972 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.401927948 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.401936054 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.696778059 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.697848082 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.697916031 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.698620081 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.698633909 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.805145025 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.805382013 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.805465937 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.805526018 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.806121111 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.806155920 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.806185961 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.806185961 CEST	49917	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.806219101 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.806240082 CEST	443	49917	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.806926966 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.806937933 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.809760094 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.809809923 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.809870958 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.810007095 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.810015917 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.914311886 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.914350033 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.914418936 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.914427996 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.914478064 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.916352034 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.916352034 CEST	49918	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.916388035 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.916415930 CEST	443	49918	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.919708967 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.919745922 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.919815063 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.919979095 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.919996977 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.990562916 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.991889954 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.991889954 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:04.991909981 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:04.991921902 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.033422947 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.034015894 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.034050941 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.034508944 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.034516096 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.036569118 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.040077925 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.040077925 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.040108919 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.040121078 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.094959021 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.094993114 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.095031023 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.095097065 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.095097065 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.095367908 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.095367908 CEST	49920	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.095381975 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.095390081 CEST	443	49920	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.098505974 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.098576069 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.098802090 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.098865032 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.098881960 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.141450882 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.141599894 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.141849041 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.141849041 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.141849041 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.144576073 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.144618988 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.144818068 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.144818068 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.144857883 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.154602051 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.154670000 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.154864073 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.154865026 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.154918909 CEST	49919	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.154934883 CEST	443	49919	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.157185078 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.157217979 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.157424927 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.157478094 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.157486916 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.447118998 CEST	49921	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.447159052 CEST	443	49921	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.456690073 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.457915068 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.457915068 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.457942009 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.457947969 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.557296038 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.558720112 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.558720112 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.558737040 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.558744907 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.604166031 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.604243040 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.604402065 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.604712009 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.604733944 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.604759932 CEST	49922	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.604768038 CEST	443	49922	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.608549118 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.608599901 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.612540007 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.612703085 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.612716913 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.666932106 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.667006016 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.667150021 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.667357922 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.667357922 CEST	49923	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.667368889 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.667376995 CEST	443	49923	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.670424938 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.670465946 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.670588017 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.670705080 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.670728922 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.729232073 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.729768038 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.729844093 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.730426073 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.730448008 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.789807081 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.791099072 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.791147947 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.791954041 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.791973114 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.813668013 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.814117908 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.814155102 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.814765930 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.814779043 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.834151983 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.834203959 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.834451914 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.834602118 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.834602118 CEST	49924	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.834623098 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.834635973 CEST	443	49924	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.838248968 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.838293076 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.838437080 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.838701963 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.838717937 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.897910118 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.898052931 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.898096085 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.898267984 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.898267984 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.898267984 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.901706934 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.901736975 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.902137041 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.902251005 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.902266979 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.941613913 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.941854954 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.942007065 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.942032099 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.942032099 CEST	49925	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.942044020 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.942049026 CEST	443	49925	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.945818901 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.945873976 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:05.946677923 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.946909904 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:05.946942091 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.212559938 CEST	49926	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.212591887 CEST	443	49926	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.235032082 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.235626936 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.235681057 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.236249924 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.236268997 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.298702955 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.299196005 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.299237013 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.299700975 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.299706936 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.338064909 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.338325024 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.338390112 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.338447094 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.338473082 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.338490009 CEST	49927	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.338496923 CEST	443	49927	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.342217922 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.342266083 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.342576981 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.342576981 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.342607975 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.406085014 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.406707048 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.406754017 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.406795979 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.406824112 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.406883955 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.406904936 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.406913996 CEST	49928	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.406919003 CEST	443	49928	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.409945965 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.410044909 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.410164118 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.410335064 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.410371065 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.457123995 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.457595110 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.457631111 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.458205938 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.458214045 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.527659893 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.528141975 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.528186083 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.528737068 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.528745890 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.560626030 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.560838938 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.561222076 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.561264992 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.561288118 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.561304092 CEST	49929	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.561311960 CEST	443	49929	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.564022064 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.564099073 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.564225912 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.564418077 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.564451933 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.626907110 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.627516031 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.627549887 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.628088951 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.628104925 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.631396055 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.631416082 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.631453037 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.631460905 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.631642103 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.631702900 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.631712914 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.631726980 CEST	49930	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.631731987 CEST	443	49930	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.635411978 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.635447025 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.635597944 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.635776997 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.635790110 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.787154913 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.787426949 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.787606955 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.787606955 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.787606955 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.792464018 CEST	49936	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.792491913 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:06.792562008 CEST	49936	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.793059111 CEST	49936	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:06.793071985 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.092200994 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.093036890 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.093074083 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.093581915 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.093591928 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.102910042 CEST	49931	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.102940083 CEST	443	49931	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.201431036 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.201503038 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.201802015 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.201864004 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.201864004 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.201934099 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.201934099 CEST	49932	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.201955080 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.201966047 CEST	443	49932	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.205193996 CEST	49937	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.205241919 CEST	443	49937	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.205334902 CEST	49937	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.205513000 CEST	49937	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.205528021 CEST	443	49937	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.278094053 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.278795958 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.278841019 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.279350996 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.279366016 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.282303095 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.282726049 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.282754898 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.283318996 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.283329010 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.316046953 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.316603899 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.316618919 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.317269087 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.317272902 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.386888027 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.387037992 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.387439966 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.387440920 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.387440920 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.390307903 CEST	49938	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.390378952 CEST	443	49938	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.390456915 CEST	49938	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.390584946 CEST	49938	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.390605927 CEST	443	49938	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.425328016 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.425349951 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.425400019 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.425434113 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.425458908 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.425685883 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.425685883 CEST	49935	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.425698042 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.425704956 CEST	443	49935	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.428491116 CEST	49939	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.428523064 CEST	443	49939	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.428642988 CEST	49939	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.428807974 CEST	49939	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.428819895 CEST	443	49939	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.430372953 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.430794001 CEST	49936	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.430808067 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.431350946 CEST	49936	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.431355953 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.536557913 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.536711931 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.536767006 CEST	49936	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.536777020 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.536808014 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.536889076 CEST	49936	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.536904097 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.536916971 CEST	49936	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.536916971 CEST	49936	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.536925077 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.536937952 CEST	443	49936	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.539130926 CEST	49940	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.539158106 CEST	443	49940	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.539447069 CEST	49940	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.539726973 CEST	49940	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.539738894 CEST	443	49940	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.602571011 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.602629900 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.602750063 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.602823019 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.602823019 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.602922916 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.602941990 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.602982044 CEST	49934	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.602989912 CEST	443	49934	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.605029106 CEST	49941	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.605050087 CEST	443	49941	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.605271101 CEST	49941	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.605405092 CEST	49941	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.605417967 CEST	443	49941	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.691876888 CEST	49933	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.691939116 CEST	443	49933	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.838704109 CEST	443	49937	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.839235067 CEST	49937	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.839314938 CEST	443	49937	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.840178013 CEST	49937	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.840190887 CEST	443	49937	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.953749895 CEST	443	49937	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.954858065 CEST	443	49937	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.954946041 CEST	49937	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.955017090 CEST	49937	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.955055952 CEST	443	49937	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.955082893 CEST	49937	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.955100060 CEST	443	49937	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.958076954 CEST	49942	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.958098888 CEST	443	49942	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:07.958184958 CEST	49942	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.958439112 CEST	49942	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:07.958451986 CEST	443	49942	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.023741961 CEST	443	49938	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.025249004 CEST	49938	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.025289059 CEST	443	49938	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.026048899 CEST	49938	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.026061058 CEST	443	49938	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.054352999 CEST	443	49939	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.055839062 CEST	49939	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.055861950 CEST	443	49939	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.056245089 CEST	49939	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.056251049 CEST	443	49939	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.167778015 CEST	443	49938	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.168121099 CEST	443	49938	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.168212891 CEST	49938	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.168229103 CEST	443	49938	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.168294907 CEST	49938	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.168450117 CEST	49938	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.168495893 CEST	443	49938	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.168504953 CEST	49938	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.168521881 CEST	443	49938	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.171735048 CEST	49943	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.171782017 CEST	443	49943	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.171848059 CEST	49943	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.172002077 CEST	49943	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.172014952 CEST	443	49943	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.178296089 CEST	443	49939	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.178740978 CEST	443	49939	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.178792953 CEST	49939	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.178870916 CEST	49939	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.178889990 CEST	443	49939	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.178905964 CEST	49939	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.178913116 CEST	443	49939	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.181906939 CEST	49944	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.181956053 CEST	443	49944	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.182044029 CEST	49944	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.182641029 CEST	49944	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.182667971 CEST	443	49944	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.194367886 CEST	443	49940	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.194936991 CEST	49940	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.194967985 CEST	443	49940	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.196206093 CEST	49940	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.196212053 CEST	443	49940	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.229944944 CEST	443	49941	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.246987104 CEST	49941	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.247010946 CEST	443	49941	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.247406006 CEST	49941	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.247414112 CEST	443	49941	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.300218105 CEST	443	49940	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.300343990 CEST	443	49940	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.300401926 CEST	49940	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.300422907 CEST	443	49940	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.300443888 CEST	443	49940	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.300507069 CEST	49940	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.314235926 CEST	49940	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.314259052 CEST	443	49940	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.314268112 CEST	49940	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.314273119 CEST	443	49940	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.321420908 CEST	49945	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.321475983 CEST	443	49945	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.321551085 CEST	49945	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.321742058 CEST	49945	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.321763039 CEST	443	49945	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.347560883 CEST	443	49941	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.347712040 CEST	443	49941	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.347779036 CEST	49941	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.351280928 CEST	49941	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.351299047 CEST	443	49941	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.351326942 CEST	49941	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.351330996 CEST	443	49941	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.356791019 CEST	49946	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.356836081 CEST	443	49946	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.356895924 CEST	49946	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.357296944 CEST	49946	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.357311964 CEST	443	49946	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.620352030 CEST	443	49942	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.620974064 CEST	49942	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.621001005 CEST	443	49942	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.621464968 CEST	49942	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.621470928 CEST	443	49942	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.733581066 CEST	443	49942	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.734177113 CEST	443	49942	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.734225035 CEST	443	49942	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.734234095 CEST	49942	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.734297991 CEST	49942	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.737104893 CEST	49942	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.737123013 CEST	443	49942	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.737134933 CEST	49942	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.737139940 CEST	443	49942	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.746773005 CEST	49947	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.746865988 CEST	443	49947	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.746963978 CEST	49947	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.763695002 CEST	49947	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.763744116 CEST	443	49947	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.830319881 CEST	443	49944	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.830925941 CEST	49944	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.831007004 CEST	443	49944	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.831680059 CEST	49944	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.831693888 CEST	443	49944	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.840981007 CEST	443	49943	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.841782093 CEST	49943	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.841804028 CEST	443	49943	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.842528105 CEST	49943	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.842534065 CEST	443	49943	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.937674046 CEST	443	49944	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.937697887 CEST	443	49944	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.937736034 CEST	443	49944	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.937833071 CEST	49944	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.937834024 CEST	49944	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.937944889 CEST	49944	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.937989950 CEST	443	49944	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.938024044 CEST	49944	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.938039064 CEST	443	49944	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.940936089 CEST	49948	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.940969944 CEST	443	49948	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.941052914 CEST	49948	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.941337109 CEST	49948	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.941349983 CEST	443	49948	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.952380896 CEST	443	49945	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.952778101 CEST	49945	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.952797890 CEST	443	49945	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.953288078 CEST	49945	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.953294039 CEST	443	49945	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.953532934 CEST	443	49943	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.953681946 CEST	443	49943	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.953742981 CEST	49943	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.953775883 CEST	49943	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.953793049 CEST	443	49943	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.953803062 CEST	49943	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.953809023 CEST	443	49943	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.956202984 CEST	49949	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.956253052 CEST	443	49949	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.956326962 CEST	49949	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.956432104 CEST	49949	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.956455946 CEST	443	49949	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.996813059 CEST	443	49946	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.997648001 CEST	49946	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.997648001 CEST	49946	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:08.997663021 CEST	443	49946	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:08.997669935 CEST	443	49946	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.056407928 CEST	443	49945	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.056564093 CEST	443	49945	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.056732893 CEST	49945	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.056732893 CEST	49945	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.056886911 CEST	49945	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.056910038 CEST	443	49945	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.059591055 CEST	49950	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.059648037 CEST	443	49950	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.059735060 CEST	49950	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.059895992 CEST	49950	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.059912920 CEST	443	49950	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.195578098 CEST	443	49946	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.196043015 CEST	443	49946	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.198504925 CEST	49946	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.198504925 CEST	49946	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.198504925 CEST	49946	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.200572014 CEST	49951	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.200614929 CEST	443	49951	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.200829029 CEST	49951	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.200829029 CEST	49951	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.200867891 CEST	443	49951	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.427125931 CEST	443	49947	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.428093910 CEST	49947	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.428095102 CEST	49947	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.428148031 CEST	443	49947	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.428168058 CEST	443	49947	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.509200096 CEST	49946	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.509223938 CEST	443	49946	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.535856962 CEST	443	49947	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.536279917 CEST	443	49947	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.536328077 CEST	443	49947	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.536480904 CEST	49947	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.536480904 CEST	49947	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.536480904 CEST	49947	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.536741972 CEST	49947	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.536786079 CEST	443	49947	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.539371967 CEST	49953	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.539422035 CEST	443	49953	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.539814949 CEST	49953	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.539887905 CEST	49953	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.539900064 CEST	443	49953	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.602653980 CEST	443	49948	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.604072094 CEST	49948	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.604072094 CEST	49948	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.604099989 CEST	443	49948	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.604110003 CEST	443	49948	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.608350992 CEST	443	49949	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.608858109 CEST	49949	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.608901978 CEST	443	49949	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.609183073 CEST	49949	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.609189987 CEST	443	49949	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.698142052 CEST	443	49950	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.698664904 CEST	49950	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.698714018 CEST	443	49950	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.699120998 CEST	49950	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.699127913 CEST	443	49950	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.711267948 CEST	443	49948	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.712081909 CEST	443	49948	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.712137938 CEST	49948	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.712184906 CEST	49948	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.712201118 CEST	443	49948	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.712229967 CEST	49948	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.712234974 CEST	443	49948	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.714895010 CEST	49954	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.714967012 CEST	443	49954	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.715168953 CEST	49954	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.715168953 CEST	49954	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.715248108 CEST	443	49954	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.720623970 CEST	443	49949	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.721092939 CEST	443	49949	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.721209049 CEST	49949	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.721209049 CEST	49949	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.721345901 CEST	49949	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.721365929 CEST	443	49949	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.723067045 CEST	49955	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.723084927 CEST	443	49955	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.723273039 CEST	49955	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.723273039 CEST	49955	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.723299026 CEST	443	49955	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.810435057 CEST	443	49950	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.810503006 CEST	443	49950	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.810614109 CEST	443	49950	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.810836077 CEST	49950	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.810836077 CEST	49950	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.810836077 CEST	49950	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.814116955 CEST	49956	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.814208031 CEST	443	49956	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.814335108 CEST	49956	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.814646959 CEST	49956	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.814682961 CEST	443	49956	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.879973888 CEST	443	49951	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.880615950 CEST	49951	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.880635977 CEST	443	49951	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:09.881311893 CEST	49951	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:09.881316900 CEST	443	49951	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.002459049 CEST	443	49951	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.003426075 CEST	443	49951	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.003496885 CEST	49951	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.003536940 CEST	49951	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.003560066 CEST	443	49951	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.003573895 CEST	49951	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.003582001 CEST	443	49951	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.007019997 CEST	49957	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.007062912 CEST	443	49957	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.007414103 CEST	49957	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.007599115 CEST	49957	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.007615089 CEST	443	49957	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.121989012 CEST	49950	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.122016907 CEST	443	49950	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.204453945 CEST	443	49953	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.205296040 CEST	49953	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.205331087 CEST	443	49953	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.205749035 CEST	49953	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.205755949 CEST	443	49953	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.313219070 CEST	443	49953	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.313368082 CEST	443	49953	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.313488007 CEST	443	49953	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.313544035 CEST	49953	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.313600063 CEST	49953	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.313646078 CEST	49953	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.313662052 CEST	443	49953	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.313672066 CEST	49953	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.313677073 CEST	443	49953	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.316617966 CEST	49958	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.316637039 CEST	443	49958	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.317749977 CEST	49958	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.317749977 CEST	49958	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.317779064 CEST	443	49958	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.367136002 CEST	443	49954	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.367794037 CEST	49954	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.367820024 CEST	443	49954	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.368496895 CEST	49954	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.368503094 CEST	443	49954	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.378806114 CEST	443	49955	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.379246950 CEST	49955	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.379286051 CEST	443	49955	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.379801989 CEST	49955	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.379810095 CEST	443	49955	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.457185984 CEST	443	49956	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.457730055 CEST	49956	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.457818985 CEST	443	49956	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.458208084 CEST	49956	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.458262920 CEST	443	49956	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.484361887 CEST	443	49954	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.484513998 CEST	443	49954	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.484592915 CEST	49954	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.484680891 CEST	49954	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.484695911 CEST	443	49954	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.484708071 CEST	49954	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.484713078 CEST	443	49954	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.487968922 CEST	49959	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.488066912 CEST	443	49959	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.488167048 CEST	49959	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.488310099 CEST	49959	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.488341093 CEST	443	49959	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.495982885 CEST	443	49955	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.496129990 CEST	443	49955	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.496192932 CEST	49955	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.496273041 CEST	49955	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.496319056 CEST	443	49955	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.496346951 CEST	49955	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.496362925 CEST	443	49955	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.498974085 CEST	49960	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.499011040 CEST	443	49960	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.499073029 CEST	49960	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.499209881 CEST	49960	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.499221087 CEST	443	49960	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.758069992 CEST	443	49956	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.758143902 CEST	443	49956	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.758219004 CEST	49956	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.758245945 CEST	443	49956	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.758308887 CEST	49956	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.758466959 CEST	49956	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.758517027 CEST	443	49956	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.758553982 CEST	49956	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.758569956 CEST	443	49956	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.760530949 CEST	443	49957	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.761086941 CEST	49957	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.761105061 CEST	443	49957	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.761490107 CEST	49957	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.761493921 CEST	443	49957	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.761632919 CEST	49961	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.761678934 CEST	443	49961	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.761735916 CEST	49961	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.761948109 CEST	49961	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.761965036 CEST	443	49961	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.870387077 CEST	443	49957	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.870568037 CEST	443	49957	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.870666981 CEST	49957	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.870786905 CEST	49957	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.870786905 CEST	49957	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.870807886 CEST	443	49957	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.870815039 CEST	443	49957	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.873923063 CEST	49962	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.873966932 CEST	443	49962	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.874037027 CEST	49962	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.874273062 CEST	49962	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.874289989 CEST	443	49962	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.984296083 CEST	443	49958	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.984906912 CEST	49958	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.984925032 CEST	443	49958	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:10.985481024 CEST	49958	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:10.985492945 CEST	443	49958	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.113085985 CEST	443	49958	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.113164902 CEST	443	49958	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.113373041 CEST	49958	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.113490105 CEST	49958	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.113490105 CEST	49958	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.113502026 CEST	443	49958	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.113509893 CEST	443	49958	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.116188049 CEST	49963	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.116223097 CEST	443	49963	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.116291046 CEST	49963	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.116451025 CEST	49963	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.116463900 CEST	443	49963	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.127414942 CEST	443	49959	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.127867937 CEST	49959	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.127944946 CEST	443	49959	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.128438950 CEST	49959	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.128454924 CEST	443	49959	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.133249044 CEST	443	49960	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.133723974 CEST	49960	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.133757114 CEST	443	49960	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.134095907 CEST	49960	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.134102106 CEST	443	49960	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.238182068 CEST	443	49960	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.238724947 CEST	443	49960	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.238805056 CEST	49960	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.238908052 CEST	49960	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.238908052 CEST	49960	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.238929987 CEST	443	49960	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.238944054 CEST	443	49960	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.241930008 CEST	49964	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.241970062 CEST	443	49964	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.242044926 CEST	49964	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.242168903 CEST	49964	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.242186069 CEST	443	49964	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.323518038 CEST	443	49959	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.324116945 CEST	443	49959	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.324171066 CEST	443	49959	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.324284077 CEST	49959	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.324285030 CEST	49959	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.324285030 CEST	49959	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.324381113 CEST	49959	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.324419975 CEST	443	49959	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.326855898 CEST	49965	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.326945066 CEST	443	49965	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.327028990 CEST	49965	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.327244997 CEST	49965	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.327280998 CEST	443	49965	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.386981010 CEST	443	49961	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.387415886 CEST	49961	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.387432098 CEST	443	49961	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.388183117 CEST	49961	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.388189077 CEST	443	49961	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.495480061 CEST	443	49961	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.495662928 CEST	443	49961	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.495769978 CEST	443	49961	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.495834112 CEST	49961	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.495834112 CEST	49961	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.495934010 CEST	49961	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.495934010 CEST	49961	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.495959044 CEST	443	49961	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.495970011 CEST	443	49961	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.498842001 CEST	49966	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.498888016 CEST	443	49966	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.498986959 CEST	49966	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.499207020 CEST	49966	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.499221087 CEST	443	49966	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.504574060 CEST	443	49962	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.504951000 CEST	49962	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.504966021 CEST	443	49962	13.107.253.72	192.168.2.4
Oct 7, 2024 14:33:11.505341053 CEST	49962	443	192.168.2.4	13.107.253.72
Oct 7, 2024 14:33:11.505346060 CEST	443	49962	13.107.253.72	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 14:31:43.067651033 CEST	53	61595	1.1.1.1	192.168.2.4
Oct 7, 2024 14:31:43.589975119 CEST	53	51537	1.1.1.1	192.168.2.4
Oct 7, 2024 14:31:44.480739117 CEST	53413	53	192.168.2.4	1.1.1.1
Oct 7, 2024 14:31:44.480963945 CEST	65042	53	192.168.2.4	1.1.1.1
Oct 7, 2024 14:31:44.488114119 CEST	53	53413	1.1.1.1	192.168.2.4
Oct 7, 2024 14:31:44.488190889 CEST	53	65042	1.1.1.1	192.168.2.4
Oct 7, 2024 14:31:44.547440052 CEST	53	64175	1.1.1.1	192.168.2.4
Oct 7, 2024 14:31:45.919183969 CEST	60748	53	192.168.2.4	1.1.1.1
Oct 7, 2024 14:31:45.919325113 CEST	51702	53	192.168.2.4	1.1.1.1
Oct 7, 2024 14:31:45.926683903 CEST	53	51702	1.1.1.1	192.168.2.4
Oct 7, 2024 14:31:45.927503109 CEST	53	60748	1.1.1.1	192.168.2.4
Oct 7, 2024 14:31:46.951595068 CEST	54379	53	192.168.2.4	1.1.1.1
Oct 7, 2024 14:31:46.951735020 CEST	51215	53	192.168.2.4	1.1.1.1
Oct 7, 2024 14:31:46.958774090 CEST	53	54379	1.1.1.1	192.168.2.4
Oct 7, 2024 14:31:46.959417105 CEST	53	51215	1.1.1.1	192.168.2.4
Oct 7, 2024 14:31:56.282656908 CEST	138	138	192.168.2.4	192.168.2.255
Oct 7, 2024 14:32:01.717394114 CEST	53	59281	1.1.1.1	192.168.2.4
Oct 7, 2024 14:32:20.583359003 CEST	53	58257	1.1.1.1	192.168.2.4
Oct 7, 2024 14:32:41.722672939 CEST	53	57884	1.1.1.1	192.168.2.4
Oct 7, 2024 14:32:42.924288988 CEST	53	51287	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 14:31:44.480739117 CEST	192.168.2.4	1.1.1.1	0xa0ed	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:31:44.480963945 CEST	192.168.2.4	1.1.1.1	0xa942	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 14:31:45.919183969 CEST	192.168.2.4	1.1.1.1	0xbeb6	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:31:45.919325113 CEST	192.168.2.4	1.1.1.1	0x4d04	Standard query (0)	github.com	65	IN (0x0001)	false
Oct 7, 2024 14:31:46.951595068 CEST	192.168.2.4	1.1.1.1	0x3d95	Standard query (0)	objects.githubusercontent.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:31:46.951735020 CEST	192.168.2.4	1.1.1.1	0x22b1	Standard query (0)	objects.githubusercontent.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 14:31:44.488114119 CEST	1.1.1.1	192.168.2.4	0xa0ed	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:31:44.488190889 CEST	1.1.1.1	192.168.2.4	0xa942	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 14:31:45.927503109 CEST	1.1.1.1	192.168.2.4	0xbeb6	No error (0)	github.com		140.82.121.3	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:31:46.958774090 CEST	1.1.1.1	192.168.2.4	0x3d95	No error (0)	objects.githubusercontent.com		185.199.109.133	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:31:46.958774090 CEST	1.1.1.1	192.168.2.4	0x3d95	No error (0)	objects.githubusercontent.com		185.199.110.133	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:31:46.958774090 CEST	1.1.1.1	192.168.2.4	0x3d95	No error (0)	objects.githubusercontent.com		185.199.108.133	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:31:46.958774090 CEST	1.1.1.1	192.168.2.4	0x3d95	No error (0)	objects.githubusercontent.com		185.199.111.133	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:31:55.529345989 CEST	1.1.1.1	192.168.2.4	0x8b21	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:31:55.529345989 CEST	1.1.1.1	192.168.2.4	0x8b21	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:32:07.658437967 CEST	1.1.1.1	192.168.2.4	0xb754	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:32:07.658437967 CEST	1.1.1.1	192.168.2.4	0xb754	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:32:34.662153959 CEST	1.1.1.1	192.168.2.4	0x6d88	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:32:34.662153959 CEST	1.1.1.1	192.168.2.4	0x6d88	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:32:34.662153959 CEST	1.1.1.1	192.168.2.4	0x6d88	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 7, 2024 14:32:54.800261974 CEST	1.1.1.1	192.168.2.4	0x4f07	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 14:32:54.800261974 CEST	1.1.1.1	192.168.2.4	0x4f07	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

github.com

objects.githubusercontent.com

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	140.82.121.3	443	2020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:31:46 UTC	749	OUT	GET /terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-windows-amd64.zip HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:31:46 UTC	986	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Mon, 07 Oct 2024 12:31:46 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/60978152/8177ff65-eabf-4864-ae34-9164f71dcf5a?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241007%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241007T123146Z&X-Amz-Expires=300&X-Amz-Signature=c55c6266b316e9431b9245ec62a2d4766f22b4c892914ef8c77150f1c7ce4cc1&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dterraform-docs-v0.19.0-windows-amd64.zip&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-10-07 12:31:46 UTC	3382	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 77 65 62 70 61 63 6b 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	185.199.109.133	443	2020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:31:47 UTC	1170	OUT	GET /github-production-release-asset-2e65be/60978152/8177ff65-eabf-4864-ae34-9164f71dcf5a?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241007%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241007T123146Z&X-Amz-Expires=300&X-Amz-Signature=c55c6266b316e9431b9245ec62a2d4766f22b4c892914ef8c77150f1c7ce4cc1&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dterraform-docs-v0.19.0-windows-amd64.zip&response-content-type=application%2Foctet-stream HTTP/1.1 Host: objects.githubusercontent.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 12:31:48 UTC	826	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6694541 Content-Type: application/octet-stream Last-Modified: Wed, 18 Sep 2024 19:06:21 GMT ETag: "0x8DCD814FBFA377E" Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: f3b5050a-201e-0070-6124-1358a2000000 x-ms-version: 2023-11-03 x-ms-creation-time: Wed, 18 Sep 2024 19:06:21 GMT x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob Content-Disposition: attachment; filename=terraform-docs-v0.19.0-windows-amd64.zip x-ms-server-encrypted: true Via: 1.1 varnish, 1.1 varnish Fastly-Restarts: 1 Accept-Ranges: bytes Age: 3387 Date: Mon, 07 Oct 2024 12:31:47 GMT X-Served-By: cache-iad-kcgs7200165-IAD, cache-ewr-kewr1740024-EWR X-Cache: HIT, HIT X-Cache-Hits: 290, 0 X-Timer: S1728304308.641775,VS0,VE1
2024-10-07 12:31:48 UTC	1378	IN	Data Raw: 50 4b 03 04 14 00 08 00 08 00 39 98 32 59 00 00 00 00 00 00 00 00 00 00 00 00 07 00 09 00 4c 49 43 45 4e 53 45 55 54 05 00 01 9e 23 eb 66 5c 51 cd 6e e3 36 10 be f3 29 3e e4 b4 0b a8 e9 cf a9 e8 8d 91 68 8b a8 4c 1a 14 bd ae 8f b2 44 45 2c 64 d1 20 e9 06 79 fb 62 64 67 b7 e9 49 10 67 be df d9 49 8b c6 f7 6e 49 8e b1 32 5c df a3 7f 9d 32 be f4 5f f1 db 2f bf fe 0e 3b 39 64 17 63 37 86 78 f9 69 08 7d 02 bf e5 29 c4 f4 cc d8 de c5 8b 4f c9 87 05 3e 61 72 d1 9d df f1 1a bb 25 bb a1 c0 18 9d 43 18 d1 4f 5d 7c 75 05 72 40 b7 bc e3 ea 62 0a 0b c2 39 77 7e f1 cb 2b 3a f4 e1 fa ce c2 88 3c f9 84 14 c6 fc d6 45 87 6e 19 d0 a5 14 7a df 65 37 60 08 fd ed e2 96 dc 65 d2 1b fd ec 12 be e4 c9 e1 a9 7d 20 9e be ae 22 83 eb 66 e6 17 d0 ec 63 84 37 9f a7 70 cb 88 2e e5 e8 Data Ascii: PK92YLICENSEUT#f\Qn6)>hLDE,d ybdgIgInI2\2_/;9dc7xi})O>ar%CO]\|ur@b9w~+:<Enze7`e} "fc7p.
2024-10-07 12:31:48 UTC	1378	IN	Data Raw: 23 71 38 79 74 dc 69 d9 e0 3c 91 4d f9 c7 7f 8d e7 0a 2f 2d 24 ef 7e 5d c1 83 6c 89 62 dd 98 12 7e ff ee 50 f4 cd e6 10 14 59 e7 6c 56 9b 42 d6 d9 52 e9 07 91 78 72 f2 e2 e5 cd e5 e2 e4 04 7a 4c f6 97 60 ad 29 0d f9 7f 5e bf ca a3 81 a5 42 dc ac 11 ea e0 a7 36 68 1d 59 29 e1 77 89 bd de b0 8c 20 ce ab 41 97 39 18 cb ff 2b f4 53 15 1c 41 65 1e a7 8f ff ed f7 62 5c 0b 5f 2a ee bf 44 29 86 8b 1c 90 fc a3 b8 7a f9 f8 f1 e3 e7 2f 2f 7e 7e 76 f9 e3 cc e8 19 84 e3 bf 91 fc 28 a7 96 c5 43 a6 cb 08 8e b2 b8 32 e4 c6 4a c3 b0 3b 85 46 69 d5 74 0d dd 99 98 c9 c9 01 5a fc 47 a7 2c 96 2c 44 e5 60 ab ea 1a c8 79 e5 fb 07 e7 2c f5 47 c7 95 01 d4 1b b8 7a 49 c0 9d 93 06 f3 14 ae 57 04 67 40 5d 98 4e 7b b4 cc 03 5a 6b ac 38 20 b3 80 c2 34 0d d9 83 36 e4 20 3b 5d e6 20 57 Data Ascii: #q8yti<M/-$~]lb~PYlVBRxrzL`)^B6hY)w A9+SAeb\_*D)z//~~v(C2J;FitZG,,D`y,GzIWg@]N{Zk8 46 ;] W
2024-10-07 12:31:48 UTC	1378	IN	Data Raw: 6c 08 11 03 23 cd 0b 41 3e 17 6d 42 f9 f5 02 c8 1f a6 7e 25 56 c6 f8 61 90 56 59 2c 3a eb d4 06 09 d6 31 01 59 c0 4a d6 0e 05 b0 f4 16 7d 2f 46 00 28 5d d4 5d 89 09 91 5b 00 39 3b 21 1c 06 9f 4b 04 d6 aa c4 05 dc de 09 e0 4a 81 7f 8a de 40 f9 bc 00 7b 5a 1b 7c ed 8c 2c 8b 72 d1 89 57 f5 d8 50 c9 8f 0b f8 67 c2 e6 f4 a7 ef 92 04 7e ba bc ba 7e f1 f6 e6 c9 db 8b 97 e7 6f 20 49 fe cc 53 ef df 43 7a 1e 0e a0 e0 32 ac be 7c 71 b1 b7 36 1e 9c 6c 64 dd a1 7b f0 b2 a3 50 9c b1 7e 6f 09 df 14 60 b9 5b 30 06 e9 d2 9e 60 c4 84 a4 2e d6 c6 0e 8b 0a 53 4f fe 45 e8 4e fe bb c2 aa d6 b3 9a fa 93 d1 15 b2 c5 61 0d 49 31 c1 a6 f5 bb 71 c9 da 37 f5 b0 40 e9 92 05 fa 07 01 84 e8 fb 20 ca 38 69 51 96 ec 00 50 7b 37 19 0d 20 19 06 1c 6a a7 3c 29 be 1f f1 bb 81 87 be ac e9 25 Data Ascii: l#A>mB~%VaVY,:1YJ}/F(]][9;!KJ@{Z\|,rWPg~~o ISCz2\|q6ld{P~o`[0`.SOENaI1q7@ 8iQP{7 j<)%
2024-10-07 12:31:48 UTC	1378	IN	Data Raw: b9 51 f5 6e 9a 60 33 77 b7 43 92 71 c7 3e 91 b4 1a 9e 08 29 5b 12 43 a3 db 74 d5 7a 7c e0 ed fd ed d8 ba da 5a e5 63 e7 8a f0 db 32 3b a9 10 d7 3a 56 02 7e 7c 44 94 71 fa a0 2f c4 1d 4d 4e 4e 28 d4 62 c9 59 cf f4 9d b9 df 36 be 23 73 cb 04 f2 ff 9a d4 df 61 8d cb e1 d8 58 c8 d3 07 66 e6 22 09 9d 0f 6e b6 4d e8 72 83 82 a3 96 72 90 87 7d 49 90 7c f2 a7 17 67 cf 2f ff 4c 39 77 63 4a b5 da c1 6d 3e e8 24 bf 63 c0 3c d8 d6 60 9a 21 24 e5 3d 0d 71 72 72 cd 41 41 6a 4f e2 45 b7 38 39 a1 cb aa d5 27 d9 29 d5 6a 85 dc 7e f0 6b 19 24 d7 27 d1 31 b7 3b 08 8d 5b 32 4b b1 a4 e9 98 51 1a 68 55 71 4f 32 eb 5a d0 c6 82 c5 4a 39 4e 9d d9 ae 5a b4 f5 4e 24 83 4a 8d ae 39 b2 8e da 32 96 61 f0 99 9b 86 a6 28 6d 27 d8 2c f9 29 b6 14 8c b4 f3 67 d7 20 6d c5 7d a8 d0 ae 8f ed Data Ascii: Qn`3wCq>)[Ctz\|Zc2;:V~\|Dq/MNN(bY6#saXf"nMrr}I\|g/L9wcJm>$c<`!$=qrrAAjOE89')j~k$'1;[2KQhUqO2ZJ9NZN$J92a(m',)g m}
2024-10-07 12:31:48 UTC	1378	IN	Data Raw: 27 1c bc c9 44 be f3 df eb 27 49 85 d0 7b f6 65 a1 f9 15 21 42 c8 a0 a1 0f 70 86 b0 ee b6 4c 18 27 21 f3 2e 2b bf eb f6 d0 ed 84 6c 9a f7 33 42 f2 1f 20 e4 8e 9f 11 32 ea 81 0c 38 2f 21 de cb 38 18 09 1c 3b 87 90 67 4f 72 39 56 9e ec 0a 57 77 59 19 07 64 75 8c d9 04 f2 99 89 90 f7 89 d0 8d 5e 05 87 7b 9d 29 be 9f 80 b2 27 db cc dd e1 ee e6 70 4c 86 b1 7e 5c 17 db bb c1 d5 5d 56 3e 7f e1 a2 3b 09 61 b2 7c b6 9f 40 6e 36 11 b2 ab 1b dc a4 cb 16 2f bb 37 74 fb 1d ac 7d 12 92 cd cb d5 db 49 da df 24 f2 fd df f7 7f df ff 7d e7 3f cd 79 dd 22 e7 1d e1 bb 17 de e5 f4 fb ae 76 5e 70 e9 74 df b4 49 0b 6e 9a 31 ad 38 30 7d c1 fc 45 33 26 cf 9a 5f 71 f9 dd b7 df 5d 3c e5 96 69 81 db 16 5c 3a eb ee 71 e3 fc 77 87 ef 5c 76 f9 d4 65 cb c4 ab 96 dc 54 7a e9 82 9b ef 9c Data Ascii: 'D'I{e!BpL'!.+l3B 28/!8;gOr9VWwYdu^{)'pL~\]V>;a\|@n6/7t}I$}?y"v^ptIn180}E3&_q]<i\:qw\veTz
2024-10-07 12:31:48 UTC	1378	IN	Data Raw: 34 7a 17 f4 e3 b9 c3 be 66 b9 f3 40 c9 99 c8 73 cb a0 b1 b2 9a 70 f7 18 94 9c 6d af 23 40 75 a5 0e ce 60 aa 59 93 68 ac 7c 9e 85 01 2c a3 7a 03 03 7b 96 a7 da fe 9d 81 bd cc c0 ac fd b3 04 c1 c6 1f b3 f4 c7 48 61 f3 3a ab 40 42 83 d4 a7 66 64 11 bf 64 06 39 e7 03 9b 20 f8 a5 69 76 90 ac ef da 04 81 8f 3f 59 84 14 d3 5b 34 51 9e 50 f6 88 55 98 5f 22 5f 59 22 5f 29 5b 5c 92 cf 05 c1 58 a4 dd 44 95 2d 02 eb 1f 2f db b0 7d 8e fc 05 fe 17 a9 b7 82 3c e4 11 7c f4 1c 5a 5c 0c 52 f3 9b 56 c6 d9 84 df 5d b5 96 a8 f3 3f b7 11 90 72 1e b4 09 42 a4 f0 3a 9d 11 87 c1 c8 90 9b 19 23 33 90 91 69 48 42 da 26 fb d0 f4 8f 2c b6 09 82 a8 4c ee f0 c7 8f 5a a7 36 fa 4c 76 ac 4a 70 52 a3 cf 94 8b 55 3a f3 18 52 fa c9 f5 72 b6 49 5d 3d 23 8b 94 48 03 ae 97 45 93 a3 44 9a 66 c7 Data Ascii: 4zf@spm#@u`Yh\|,z{Ha:@Bfdd9 iv?Y[4QPU_"_Y"_)[\XD-/}<\|Z\RV]?rB:#3iHB&,LZ6LvJpRU:RrI]=#HEDf
2024-10-07 12:31:48 UTC	1378	IN	Data Raw: c3 5f 2c 2b 98 b1 8c 46 1f 65 b0 31 b4 ff cc ff 5f 8f 4f e1 15 20 c7 98 cf e7 59 8f ff 85 17 d2 9a 18 8e 0a 05 eb f1 37 3c 97 d6 c4 9e 62 49 fc 0d 5f 0f 72 ec 79 66 7f c0 b3 1e 1f c2 d7 80 1c 7b 99 e3 e3 7f e1 4b 68 4d 6c 13 43 c0 df f0 48 5a 13 db cc 92 f8 1b 3e 07 f5 98 8f 7a 2c 70 37 25 86 33 ed 3a e7 d6 63 b0 95 0b 91 b8 89 45 27 a8 d7 02 88 9c b2 fd 6c 26 86 75 b9 6c 40 90 c7 0f 03 f9 1a 01 64 51 b0 83 d4 0e 52 9b ba 2c 0b e3 9f d0 16 8c 7f 72 41 29 17 20 fe 99 95 c5 31 20 8f f8 31 86 15 f9 53 65 8b 6d aa 2c da ec aa c8 80 c3 8f 27 64 ec 58 24 96 88 a6 35 a9 3f 8e 4d 6f 52 4c be 2d b5 67 b4 de 67 5f de 7a 8b 61 33 d3 37 04 23 40 51 99 24 80 16 f7 16 74 fa a9 af 99 c9 77 f7 ca cf 40 6a ae ef 13 7f af fb 04 e2 5f e3 10 95 29 02 68 db bc 05 ef f8 a9 af Data Ascii: _,+Fe1_O Y7<bI_ryf{KhMlCHZ>z,p7%3:cE'l&ul@dQR,rA) 1 1Sem,'dX$5?MoRL-gg_za37#@Q$tw@j_)h
2024-10-07 12:31:48 UTC	1378	IN	Data Raw: 81 a7 0a 6b 6d 79 51 20 44 0e 15 7c 83 65 0d 4d 23 b2 bf e5 31 4e c4 be f4 82 12 5e d6 29 90 af 12 b1 b0 af 84 14 5c a2 e5 6e 0e 47 97 4e 32 0a f3 cb 73 48 3b 22 31 f8 54 69 5f b5 14 32 d7 32 54 d0 0e 58 de 73 42 7a dd c6 70 3a 8e a5 ee b6 22 ba c8 8e c4 be 6e a3 8b 86 06 69 68 4f 90 1e 38 0e ab 3a d9 f8 52 55 96 86 f6 b7 96 cf 59 1b 6e 1f bd 74 9e 51 3c a2 fb 48 2b a3 d2 03 81 14 3f 1f b5 fc 9e 77 b3 39 05 68 f8 0e 06 e9 81 b6 64 29 fd d3 4a d9 dc 52 c5 4b 71 2e 1d bb 3d fe 20 67 ee 43 66 a1 d0 38 9d 39 d0 86 58 9a 16 5a 60 60 7c 9c b8 d1 60 07 11 7c e4 28 c3 eb 01 65 40 0a 05 87 c4 39 05 47 77 7c 1a 3a ba e3 cc 81 7f e8 00 83 0d 80 6d 3b da 97 fa 1b cd 6c a8 df d1 be 34 71 4f 65 e1 c0 35 cc 32 df 73 06 47 dc f6 6c 1a 59 dc a9 69 7e a5 cc 11 3c d9 d0 4a Data Ascii: kmyQ D\|eM#1N^)\nGN2sH;"1Ti_22TXsBzp:"nihO8:RUYntQ<H+?w9hd)JRKq.= gCf89XZ``\|`\|(e@9Gw\|:m;l4qOe52sGlYi~<J
2024-10-07 12:31:48 UTC	1378	IN	Data Raw: 53 9a 4c a6 de e5 77 21 9f 5e fe d2 c1 95 a7 06 86 fa 23 27 c3 40 f6 e6 d7 b3 9f ca 53 43 42 43 2b 4f 9d 17 ca a9 3c 35 34 64 66 11 90 91 c7 f8 fd b6 f5 1b c6 90 eb 7b cd 1f 72 96 fc 81 67 c9 1f 74 96 fc c1 3d e6 83 dc f7 0c 1e ad f1 0e a9 ef 3b ff bc fa be eb 1f 18 7c 62 9b 10 9a 4e 6b 02 43 23 1f 8d 86 c8 b6 af 20 72 da be f4 6a 50 72 fe ad 0a 15 b8 07 94 00 24 26 80 12 f0 26 2e 07 25 50 90 18 0b 4a 20 90 b8 10 94 40 69 62 24 7b 33 94 fd 0e 64 ef 07 80 12 c8 4f 58 dd 7b 99 fd de 1b 1a 4d 37 96 db 82 d1 13 61 9b fb 84 7b 6f c2 26 3f 60 07 e1 34 48 cd 20 b5 61 4b cd 6c b1 7d ec 6f b3 a7 84 15 ee 8f 8d 19 22 db ed 73 eb d5 ab 34 74 5d 0e f2 14 1f 6c 3e 19 a4 f7 b0 c4 9f cf e2 1f 7b bd 7d c9 47 f6 ce 8c 1c 15 7a 87 90 61 26 dd f2 a1 40 d7 f5 62 5f 78 be e9 Data Ascii: SLw!^#'@SCBC+O<54df{rgt=;\|bNkC# rjPr$&&.%PJ @ib${3dOX{M7a{o&?`4H aKl}o"s4t]l>{}Gza&@b_x
2024-10-07 12:31:48 UTC	1378	IN	Data Raw: e6 89 ca 0d 42 89 27 5e 22 6d 2b a1 62 1c 2b 37 31 18 03 4f 5b d8 5a e2 d9 93 98 2b f2 7d d6 6b 19 93 28 f2 0a 90 5e 67 1f 01 80 d4 2a 4a 71 75 e0 55 bc a5 07 90 85 0a f0 ec 4c 72 27 eb 70 58 8a 5f 8a 63 8f 4b 72 cb e9 2d f5 21 67 91 f8 19 90 de d1 39 13 c7 bc 03 42 27 78 76 01 15 77 a1 34 58 3b f0 b4 85 1c 20 b5 aa bf be 32 4d d4 ab b6 3f cb e6 19 44 69 a7 28 ed 51 ab 2f 65 3b 78 f9 fc d0 72 96 68 56 17 5f 9a 45 78 9c fa c2 25 6c 0f f0 e6 fe 2c 3e 7e 3a 2d a5 3e c2 12 3b 79 62 55 7a 22 74 09 43 57 46 3e 9d 58 4f 40 7a 67 2b b1 10 22 2a d6 d2 05 eb 48 d1 66 33 21 64 f3 70 84 bb c4 64 25 ea 73 53 6d 04 a4 7a 50 ac ff 27 b1 92 a8 ed cf da 08 28 23 df 3a b3 9e 6c 1e c1 e4 d5 68 a0 0f 4b a2 bb eb d4 56 c1 4a d4 7b 92 b8 b7 27 56 62 fc fe 6c f7 f8 11 bb 86 13 Data Ascii: B'^"m+b+71O[Z+}k(^gJquULr'pX_cKr-!g9B'xvw4X; 2M?Di(Q/e;xrhV_Ex%l,>~:->;ybUz"tCWF>XO@zg+"Hf3!dpd%sSmzP'(#:lhKVJ{'Vbl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:31:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 12:31:50 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=188032 Date: Mon, 07 Oct 2024 12:31:50 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:31:51 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 12:31:51 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=187967 Date: Mon, 07 Oct 2024 12:31:51 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 12:31:51 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49750	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:35 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:35 UTC	568	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:35 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 06 Oct 2024 16:59:23 GMT ETag: "0x8DCE6283A3FA58B" x-ms-request-id: 86eceaf5-401e-00a3-6fa2-188b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123235Z-1767f7688dcddqmnbcgcfkdk6s00000003s0000000008tq8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-07 12:32:35 UTC	15816	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-07 12:32:35 UTC	16384	IN	Data Raw: 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 Data Ascii: <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-07 12:32:35 UTC	16384	IN	Data Raw: 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 Data Ascii: > <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-776
2024-10-07 12:32:35 UTC	16384	IN	Data Raw: 22 4d 61 78 45 76 65 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e Data Ascii: "MaxEvents" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Coun
2024-10-07 12:32:35 UTC	16384	IN	Data Raw: 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: /F> </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T
2024-10-07 12:32:35 UTC	16384	IN	Data Raw: 65 72 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 Data Ascii: er_Null_Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C>
2024-10-07 12:32:35 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <
2024-10-07 12:32:35 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f Data Ascii: /> </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O
2024-10-07 12:32:35 UTC	16384	IN	Data Raw: 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 Data Ascii: "false" T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-07 12:32:35 UTC	16384	IN	Data Raw: 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 Data Ascii: </O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49754	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:36 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:36 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:36 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: ec1acd5e-601e-00ab-3736-1666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123236Z-r154656d9bc5gm9nqxzv5c87e800000005k000000000dq6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:36 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49752	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:36 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:36 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:36 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 265a1445-001e-00a2-25c7-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123236Z-1767f7688dck2l7961u6s0hrtn0000000s7g00000000aw9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:36 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49753	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:36 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:36 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:36 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: bddb3ee8-601e-003d-2e78-186f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123236Z-1767f7688dc88qkvtwr7dy4vdn0000000adg00000000b1nz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:36 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49751	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:36 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:36 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: eb718e1d-001e-000b-2c22-1615a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123236Z-r154656d9bcc4snr2sy7ntt13c0000000bbg00000000m602 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:36 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49755	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:36 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:36 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 4b0a31e7-c01e-00ad-448c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123236Z-1767f7688dccbx4fmf9wh4mm3c0000000rq000000000m5sw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:36 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49756	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:37 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:37 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: aa8826a4-b01e-0053-608c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123237Z-1767f7688dc5smv9fdkth3nru00000000rz000000000mad4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:37 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49757	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:37 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:37 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 757ce4f4-401e-000a-128c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123237Z-r154656d9bcwbfnhhnwdxge6u000000006e0000000009mr9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:37 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49759	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:37 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:37 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:37 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: c55c0703-801e-00a0-3f04-182196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123237Z-r154656d9bcvjnbgheqhz2uek80000000s2000000000hfy9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:37 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49758	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:37 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:37 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 24b39cfc-301e-0096-2a8c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123237Z-r154656d9bclhnqxthdkb0ps8000000007z000000000f585 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:37 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49760	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:37 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:37 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b2393cc3-501e-005b-768c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123237Z-r154656d9bc7mtk716cm75thbs0000000rtg00000000g5pa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:37 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49762	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:38 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:38 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 1cc301c6-e01e-0071-6b8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123238Z-r154656d9bc94jg685tuhe75qw0000000ee000000000kfa5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:38 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49761	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:38 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: cc223d3c-501e-008f-0ec7-179054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123238Z-1767f7688dcxs7gvbd5dcgxeys0000000rrg00000000h8su x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49763	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:38 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1cc301ca-e01e-0071-6f8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123238Z-1767f7688dc9hz5543dfnckp1w0000000g5g00000000mx1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49764	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:38 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:38 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 53cb037b-d01e-002b-6f04-1825fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123238Z-r154656d9bc5gm9nqxzv5c87e800000005fg00000000knvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:38 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49765	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:38 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 53b222f3-a01e-0098-419e-158556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123238Z-r154656d9bcjfw87mb0kw1h2480000000eg000000000b7x0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49766	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:38 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:39 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 77844cee-a01e-0032-35c7-171949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123239Z-1767f7688dc2kzqgyrtc6e2gp40000000rxg00000000epd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:39 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49767	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:38 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: dae66c3e-d01e-0066-08a4-15ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123238Z-1767f7688dc5smv9fdkth3nru00000000s0000000000h25r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:39 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49770	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:39 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:39 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 337d02d6-201e-0003-1678-18f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123239Z-1767f7688dc4zx8hzkgqpgqkb400000009t000000000eue6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:39 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49768	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:39 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:39 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 24b39fc0-301e-0096-298c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123239Z-r154656d9bc27nzfvdqr2guqt000000001w000000000cask x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:39 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49769	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:39 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:39 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 8abcb726-301e-001f-1b78-18aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123239Z-r154656d9bcx62tnuqgh46euy40000000860000000003fdn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:39 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49772	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:39 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0da94923-701e-0097-168c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123239Z-r154656d9bcdp2lt7d5tpscfcn0000000s3000000000ne7y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49771	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:39 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: eee776c4-301e-001f-2622-16aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123239Z-r154656d9bcwbfnhhnwdxge6u000000006cg00000000d16k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49773	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:39 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:39 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123239Z-r154656d9bcjpgqtzd4z33r5yn0000000eh000000000c3ma x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:40 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49774	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:39 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: f71a7e49-201e-000c-5aa4-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123239Z-1767f7688dcsjpdx60gbb8v42g0000000bb000000000eqw9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49775	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:39 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:39 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: bc3bb15e-601e-003d-16f8-176f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123239Z-r154656d9bc6kzfwvnn9vvz3c400000005qg00000000bay1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:40 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49776	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:40 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:40 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 22e42897-601e-0070-65c7-17a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123240Z-1767f7688dc9s2cg0vz2a9g5ms000000016g00000000nxaa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:40 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49777	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:40 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 1e32dda0-e01e-000c-2bf8-178e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123240Z-r154656d9bc6m642udcg3mq41n0000000am000000000ktb3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49779	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:40 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c2ca9d4d-801e-0035-458c-15752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123240Z-r154656d9bc4v6bg39gwnbf5vn00000006rg000000008t7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49778	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:40 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:40 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: a910d2e0-401e-005b-72a6-159c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123240Z-1767f7688dc88qkvtwr7dy4vdn0000000agg000000000371 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:40 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49780	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:40 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:40 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: cce90406-001e-005a-059e-15c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123240Z-1767f7688dcrppb7pkfhksct680000000rw0000000003ew8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:40 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49781	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:41 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:41 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a7623418-001e-00a2-348c-15d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123241Z-r154656d9bc4v6bg39gwnbf5vn00000006n000000000gn02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:41 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49782	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:41 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: bf719520-501e-00a0-3378-189d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123241Z-1767f7688dccbx4fmf9wh4mm3c0000000ru0000000009z18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49783	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:41 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: bf725111-501e-00a0-7c78-189d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123241Z-1767f7688dcdplk6tmg02e519n0000000s9000000000bs3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:41 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49784	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:41 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:41 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 4fef4e97-801e-007b-44c7-15e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123241Z-r154656d9bcpkd87yvea8r1dfg0000000e60000000000vda x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:41 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49785	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:41 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:41 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: e8bdadc1-401e-0067-74c7-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123241Z-1767f7688dc6trhkx0ckh4u3qn0000000s7g00000000mrrg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:41 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49786	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:41 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:41 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: c4ad759c-701e-0001-2422-16b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123241Z-r154656d9bcc2bdtn1pd2qfd4c0000000s3000000000acx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:42 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49787	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:41 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:41 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 0dcb6c6d-e01e-0003-668c-150fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123241Z-1767f7688dc4zx8hzkgqpgqkb400000009v000000000beq4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:42 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49788	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:42 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:42 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 70979e43-c01e-00a1-459c-157e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123242Z-1767f7688dcqrzlg5y6mnvesus00000001g0000000005wvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:42 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49790	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:42 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:42 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 772ea1ab-e01e-003c-188c-15c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123242Z-1767f7688dcnlss9sm3w9wbbbn00000004fg000000002kzu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:42 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49792	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:42 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:42 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3a0dcc46-601e-0032-6c8c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123242Z-r154656d9bccl8jh8cxn9cxxcs0000000eq0000000000ext x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:42 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49793	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:42 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:42 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 15fe0b87-a01e-0002-3b8c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123242Z-1767f7688dcdplk6tmg02e519n0000000sag000000007m1a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:42 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49794	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:42 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:42 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 738079d0-501e-00a3-3dc7-17c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123242Z-1767f7688dcdss7lwsep0egpxs0000000rvg00000000hfqx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:43 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49795	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:43 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:43 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: c54fbac1-901e-008f-588c-1567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123243Z-r154656d9bcgk58qzsfr5pfzg40000000s5g000000008v5t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:43 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49796	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:43 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:43 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 4b3baa61-c01e-00ad-4e9e-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123243Z-r154656d9bcp2td5zh846myygg0000000rz000000000mg17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:43 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49797	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:43 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:43 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 76252b1b-c01e-0066-488c-15a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123243Z-r154656d9bc94jg685tuhe75qw0000000en0000000004mq0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:43 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49798	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:43 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:43 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9a197f6-401e-0078-3b8c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123243Z-1767f7688dcvlhnc8mxy0v1nqw000000033000000000cnh1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:43 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49799	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:43 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:43 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b83a8dc4-f01e-003f-308c-15d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123243Z-r154656d9bcvjnbgheqhz2uek80000000s3000000000fexc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:43 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49800	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:44 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c276760a-301e-0051-159c-1538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123244Z-r154656d9bc7mtk716cm75thbs0000000rs000000000m1u4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49801	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:44 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:44 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7be6812e-d01e-008e-528c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123244Z-1767f7688dc5plpppuk35q59aw0000000rz000000000eg7e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:44 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49802	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:44 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 1f480aea-c01e-002b-028c-156e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123244Z-r154656d9bc6kzfwvnn9vvz3c400000005n000000000hgc7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49803	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:44 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:44 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7be6821c-d01e-008e-398c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123244Z-1767f7688dcxs7gvbd5dcgxeys0000000rw000000000798b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:44 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49804	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:45 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 16d3a614-701e-0032-288c-15a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123245Z-r154656d9bczc24jcy1csnb0es00000002fg0000000040nt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49805	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:45 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: aa883537-b01e-0053-4c8c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123245Z-1767f7688dc5plpppuk35q59aw0000000rw000000000n9a8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49789	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:45 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:45 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 9bed673a-001e-0046-278c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123245Z-r154656d9bc6m642udcg3mq41n0000000arg000000009k1h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:45 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49808	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:45 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:45 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: c2af8a05-b01e-0097-3236-164f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123245Z-r154656d9bc5gm9nqxzv5c87e800000005pg000000002vd8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:45 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49807	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:45 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 7a9ad003-b01e-0053-6d8c-18cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123245Z-1767f7688dcxfh5bcu3z8cgqmn0000000s9g00000000eywu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49809	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:46 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:46 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: be018b72-401e-0035-7e8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123246Z-r154656d9bcrxcdc4sxf91b6u400000008tg00000000d2ue x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:46 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49811	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:46 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:46 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: be018b82-401e-0035-0c8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123246Z-r154656d9bcgk58qzsfr5pfzg40000000s0g00000000khwk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49810	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:46 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:46 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:46 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 38660718-101e-000b-6724-185e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123246Z-r154656d9bckpfgl7fe14swubc0000000em000000000brcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:46 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49812	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:46 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:46 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 801e2bd2-b01e-0021-6a8c-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123246Z-1767f7688dc5kg9bwc8fvfnfb40000000s9g000000005yp5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:46 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49813	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:47 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:47 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 72f765ac-101e-0017-69fb-1747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123247Z-r154656d9bcmxqxrqrw0qrf8hg0000000ay0000000001ram x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:47 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49814	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:47 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:47 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 3623a01f-301e-003f-6f73-16266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123247Z-1767f7688dc5kg9bwc8fvfnfb40000000s7000000000d1nb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:47 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49815	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:47 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:47 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:47 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 6ff3ba62-001e-0082-1536-165880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123247Z-r154656d9bc4v6bg39gwnbf5vn00000006q000000000ccmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:47 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49817	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:47 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:47 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 12d54781-201e-0071-43c7-17ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123247Z-1767f7688dc88qkvtwr7dy4vdn0000000adg00000000b2nq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:47 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49816	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:47 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:47 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: dc79791b-701e-0053-72c7-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123247Z-1767f7688dc9s2cg0vz2a9g5ms000000017g00000000m7p6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:47 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49818	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:47 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: a0476a89-101e-0028-4bc7-178f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123247Z-r154656d9bczmvnbrzm0xmzrs40000000epg000000004gkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:48 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49819	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:48 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:48 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 15fe1592-a01e-0002-378c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123248Z-r154656d9bcvjnbgheqhz2uek80000000s80000000000mer x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:48 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49820	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:48 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:48 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 801b5ab8-801e-00ac-3319-18fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123248Z-r154656d9bcpnqc46yk454phh800000003n000000000mpee x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:48 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49821	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:48 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:48 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 2c636da2-401e-0047-0afb-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123248Z-r154656d9bclhnqxthdkb0ps80000000080g00000000d498 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49822	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:48 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:48 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e08726cd-901e-00a0-738c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123248Z-1767f7688dctps2t8qk28fz8yg0000000rz000000000e7tf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:48 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49823	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:48 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:48 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:48 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 766164d5-c01e-0082-668c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123248Z-r154656d9bcc4snr2sy7ntt13c0000000bb000000000nd9u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:48 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49824	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:48 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:48 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 012726c1-901e-00a0-16c7-176a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123248Z-1767f7688dc4gvn6w3bs6a6k900000000s6g00000000bdqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:49 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49825	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:48 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:48 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d59d44fd-601e-003e-698c-153248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123248Z-1767f7688dc5std64kd3n8sca400000008dg00000000m6uq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:49 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49826	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:48 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:49 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 4a2177bf-401e-00a3-638c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123249Z-r154656d9bccl8jh8cxn9cxxcs0000000ep0000000005ba8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:49 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49827	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:48 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:49 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: d9118a4b-801e-00ac-0522-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123249Z-r154656d9bcx62tnuqgh46euy4000000084000000000ayak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:49 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49828	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:49 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:49 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 1cc30b66-e01e-0071-368c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123249Z-1767f7688dcv97m7bx1m7utdsg00000000wg00000000gwr4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:49 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49830	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:49 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:49 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:49 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 8a28721d-501e-008f-3e9c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123249Z-r154656d9bc8glqfu2duqg0z1w00000001q0000000007ykt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:49 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49829	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:49 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:49 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:49 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 8e9c9a52-201e-000c-6b8c-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123249Z-r154656d9bcdp2lt7d5tpscfcn0000000s2g00000000mguq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:49 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49831	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:49 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:49 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: e14f8daf-301e-0033-24a4-15fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123249Z-r154656d9bcv7txsqsufsswrks0000000ek0000000008br0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:49 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49832	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:49 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:49 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: ca3756a4-801e-0048-15c7-17f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123249Z-1767f7688dcvp2wzdxa8717z3000000004mg00000000eqrc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:49 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49833	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:50 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:50 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:50 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 82f8c3b9-c01e-0014-418c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123250Z-1767f7688dcnw9hfer0bd0kh1g000000027000000000nfzx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:50 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49834	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:50 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:50 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: b23951fc-501e-005b-2a8c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123250Z-1767f7688dc2kzqgyrtc6e2gp40000000rw000000000gstd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:50 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49835	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:50 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:50 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: b9a19e00-401e-0078-388c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123250Z-r154656d9bckpfgl7fe14swubc0000000eg000000000hkgr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:50 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49836	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:50 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:50 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 7afec079-601e-000d-468c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123250Z-r154656d9bc27nzfvdqr2guqt000000001xg000000008efu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:50 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49837	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:50 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:50 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:50 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3acf1156-e01e-0052-60c7-17d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123250Z-1767f7688dc4zx8hzkgqpgqkb400000009rg00000000m2ec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:50 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49838	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:51 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:51 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:51 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: a68e09c4-f01e-0052-148c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123251Z-1767f7688dc4zx8hzkgqpgqkb400000009t000000000evp6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:51 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49841	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:51 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:51 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:51 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07aacdb1-401e-0083-73c7-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123251Z-1767f7688dc5std64kd3n8sca400000008m00000000048gx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:51 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49842	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:51 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:51 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:51 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7afec1f8-601e-000d-328c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123251Z-r154656d9bcwd5vj3zknz7qfhc000000074000000000p05u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:51 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49839	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:51 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:51 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:51 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 6a90313a-301e-005d-1a8c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123251Z-1767f7688dctps2t8qk28fz8yg0000000rzg00000000dk29 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:51 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49840	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:51 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:52 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:52 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 03c3f781-101e-000b-56fe-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123251Z-1767f7688dcsjpdx60gbb8v42g0000000ba000000000h4b8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:52 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49843	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:52 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:52 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:52 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 92784c80-801e-002a-088c-1531dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123252Z-r154656d9bc94jg685tuhe75qw0000000ed000000000n2kn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:52 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49844	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:52 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:53 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:52 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 4a217eb8-401e-00a3-218c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123252Z-r154656d9bc6kzfwvnn9vvz3c400000005t0000000003x4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:53 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49845	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:52 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:52 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 18b29d22-e01e-0085-0978-18c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123252Z-1767f7688dcnw9hfer0bd0kh1g00000002a000000000dxd0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:52 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49846	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:52 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:52 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:52 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6a90350a-301e-005d-348c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123252Z-r154656d9bcv7txsqsufsswrks0000000ekg000000006ahe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:52 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49849	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:53 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:53 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:53 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 29534450-901e-0064-768c-15e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123253Z-1767f7688dc6trhkx0ckh4u3qn0000000se0000000003bp5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:53 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49848	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:53 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:53 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:53 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: dae695f2-d01e-0066-14a4-15ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123253Z-r154656d9bcpkd87yvea8r1dfg0000000e40000000008fh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:53 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49847	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:53 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:53 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:53 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123253Z-r154656d9bcpnqc46yk454phh800000003u0000000007pae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:53 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49850	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:53 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:53 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 6ec2e3f4-801e-007b-208c-15e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123253Z-r154656d9bcclz9cswng83z0t00000000as0000000002h7z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49851	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:53 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 0da95f5c-701e-0097-318c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123253Z-r154656d9bcc2bdtn1pd2qfd4c0000000rz000000000gxe1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:54 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49852	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:54 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:54 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 740c05bf-801e-008c-4478-187130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123254Z-1767f7688dcxs7gvbd5dcgxeys0000000ru000000000d5za x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:54 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49853	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:54 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:54 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 8be9c1e7-301e-0052-678c-1565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123254Z-r154656d9bckpfgl7fe14swubc0000000emg00000000b7z3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:54 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49854	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:54 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:54 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: dc68e902-201e-006e-0d8c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123254Z-r154656d9bc6m642udcg3mq41n0000000ang00000000fhqx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:54 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49855	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:54 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:54 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d5bde9b-e01e-0071-239c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123254Z-r154656d9bcp2td5zh846myygg0000000rzg00000000kmr2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:54 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49856	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:54 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:54 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 6e08d1a6-401e-0067-5736-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123254Z-r154656d9bcpnqc46yk454phh800000003rg00000000eqhk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:54 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49857	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:54 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:54 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ba3c7a68-301e-0099-698c-156683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123254Z-r154656d9bcc2bdtn1pd2qfd4c0000000rzg00000000gpe6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:55 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49858	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:54 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:55 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a1759df9-d01e-007a-08c7-17f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123254Z-r154656d9bcc2bdtn1pd2qfd4c0000000rz000000000gxgm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:55 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49859	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:55 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:55 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0964379-001e-0049-4678-185bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123255Z-1767f7688dcdss7lwsep0egpxs0000000rwg00000000gwh4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:55 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49861	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:55 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:55 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: a86553fd-f01e-0020-0819-18956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123255Z-r154656d9bckpfgl7fe14swubc0000000emg00000000b84a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49862	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:55 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 831f1653-b01e-0098-198c-15cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123255Z-1767f7688dc9hz5543dfnckp1w0000000g6g00000000heg7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:55 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49863	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:55 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:55 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7585955c-001e-000b-518c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123255Z-r154656d9bcgk58qzsfr5pfzg40000000s5g000000008wn0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:55 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49864	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:56 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:56 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:56 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: b7a8ce39-d01e-0014-539c-15ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123256Z-r154656d9bcc4snr2sy7ntt13c0000000bh0000000006s53 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:56 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49865	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:56 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:56 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:56 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: c27d0d21-301e-0051-279e-1538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123256Z-r154656d9bcfd2bs2ymcm7xz980000000ekg00000000b0kd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:56 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49866	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:56 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:56 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: db922a57-b01e-001e-0e73-160214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123256Z-1767f7688dcvlhnc8mxy0v1nqw000000030g00000000hvan x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:56 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49867	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:56 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:56 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 757cff4f-401e-000a-528c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123256Z-r154656d9bc27nzfvdqr2guqt000000001xg000000008etg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:56 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49868	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:56 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:56 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 7756834e-501e-0035-801d-17c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123256Z-1767f7688dcxs7gvbd5dcgxeys0000000rqg00000000mzua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:57 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49860	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:56 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:57 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 15872d8d-001e-0017-36c7-150c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123257Z-1767f7688dc2kzqgyrtc6e2gp40000000s10000000002nq2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:57 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49869	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:57 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:57 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 3b1bff85-e01e-0052-0be7-17d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123257Z-r154656d9bcv7txsqsufsswrks0000000ekg000000006ay9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:57 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49870	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:57 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:57 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 60dc3e57-e01e-00aa-4d39-16ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123257Z-r154656d9bckpfgl7fe14swubc0000000en0000000009tp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:57 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49871	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:57 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:57 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 26cf0b74-601e-003e-0d78-183248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123257Z-1767f7688dc97m2se6u6hv466400000007vg00000000e1p0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:57 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49872	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:57 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:57 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: d94163bc-601e-0084-55c7-176b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123257Z-1767f7688dc2kzqgyrtc6e2gp40000000rw000000000gtfe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:57 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49873	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:57 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:57 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 62411c99-501e-0029-481b-18d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123257Z-r154656d9bcv7txsqsufsswrks0000000ehg000000009435 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:57 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49874	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:58 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:58 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: cc2250c5-501e-008f-2ac7-179054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123258Z-r154656d9bcfd2bs2ymcm7xz980000000eg000000000guam x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:32:58 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49876	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:58 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:58 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 56c891cb-f01e-0085-428c-1588ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123258Z-1767f7688dc4zx8hzkgqpgqkb400000009xg0000000028ds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:58 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49875	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:58 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:58 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: be019976-401e-0035-5d8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123258Z-r154656d9bc5qmxtyvgyzcay0c0000000ekg00000000926s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:58 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49877	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:58 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:58 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 90bcc401-701e-006f-76a4-15afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123258Z-r154656d9bcvjnbgheqhz2uek80000000s4000000000dqk1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:58 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49878	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:58 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:58 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 5f7380a8-801e-0015-7b8c-15f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123258Z-r154656d9bctbqfcgmyvqx3k100000000ekg000000005pct x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:58 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49879	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:58 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:58 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 06e88621-201e-0051-35a6-157340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123258Z-r154656d9bcmxqxrqrw0qrf8hg0000000atg00000000eqrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:58 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49880	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:58 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:58 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: be019a9f-401e-0035-518c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123258Z-r154656d9bcdp2lt7d5tpscfcn0000000s90000000003eqf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:58 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49881	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:58 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:58 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 2d26e6ec-001e-0066-1e78-18561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123258Z-1767f7688dcdss7lwsep0egpxs0000000rx000000000fbmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:58 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49883	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:59 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:59 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:59 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e1f9e951-101e-0065-3bc7-174088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123259Z-1767f7688dcdvjcfkw13t1btbs0000000s9g000000004hps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:59 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49882	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:59 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:59 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:59 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 4ec80adc-b01e-0098-309c-15cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123259Z-r154656d9bcvjnbgheqhz2uek80000000s5g000000009nn0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:59 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49884	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:59 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:59 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:59 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 926ec81f-301e-0052-4778-1865d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123259Z-1767f7688dc5smv9fdkth3nru00000000s4000000000719d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:59 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49885	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:59 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:59 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:59 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 3303e14a-901e-005b-7b78-182005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123259Z-1767f7688dc88qkvtwr7dy4vdn0000000abg00000000g332 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:59 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49886	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:32:59 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:32:59 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:32:59 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: c27691d9-301e-0051-769c-1538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123259Z-r154656d9bcwbfnhhnwdxge6u000000006eg0000000082tm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:32:59 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49887	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:33:00 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:33:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:33:00 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: fba86ca6-e01e-00aa-5200-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123300Z-1767f7688dc5kg9bwc8fvfnfb40000000s8000000000bak3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:33:00 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49888	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:33:00 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:33:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:33:00 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 4a218e36-401e-00a3-268c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123300Z-r154656d9bcp2td5zh846myygg0000000s6g0000000009y8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:33:00 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49889	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:33:00 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:33:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:33:00 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: f1c85a61-d01e-007a-188c-15f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123300Z-r154656d9bcjfw87mb0kw1h2480000000eh00000000090e3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:33:00 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49890	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:33:00 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:33:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:33:00 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 0e45fb44-301e-005d-1e9c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123300Z-r154656d9bccl8jh8cxn9cxxcs0000000en0000000008ry9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:33:00 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49891	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:33:00 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:33:00 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:33:00 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: b9a1a970-401e-0078-528c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123300Z-1767f7688dcxjm7c0w73xyx8vs0000000s7g00000000ds8y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:33:00 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49892	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:33:00 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:33:00 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:33:00 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 478eb60b-a01e-0032-7d93-151949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123300Z-1767f7688dc97m2se6u6hv466400000007x0000000008u2d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:33:00 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49893	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:33:00 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:33:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:33:00 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 3b68eaf5-101e-008e-7624-17cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123300Z-1767f7688dc2kzqgyrtc6e2gp40000000ry000000000dz8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:33:01 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49895	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:33:01 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:33:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:33:01 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 801e3e61-b01e-0021-2d8c-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123301Z-1767f7688dc7bfz42qn9t7yq500000000s1g00000000fv44 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:33:01 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49894	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:33:01 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:33:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:33:01 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: b9d89a70-001e-008d-3b8c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123301Z-r154656d9bc5gm9nqxzv5c87e800000005m000000000b5ss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:33:01 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49896	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:33:01 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:33:01 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:33:01 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: a26cc4b3-101e-007a-5036-16047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123301Z-r154656d9bccl8jh8cxn9cxxcs0000000ef000000000kq5r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-07 12:33:01 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49897	13.107.253.72	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 12:33:01 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 12:33:01 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 12:33:01 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: a28b2a65-c01e-00a1-0a05-187e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T123301Z-r154656d9bc27nzfvdqr2guqt000000001yg0000000061hf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 12:33:01 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Target ID:	0
Start time:	08:31:33
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:31:38
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2044,i,879850001711432955,9733008339987570398,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:31:45
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://github.com/terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-windows-amd64.zip"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	08:31:53
Start date:	07/10/2024
Path:	C:\Windows\SysWOW64\unarchiver.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip"
Imagebase:	0xc60000
File size:	12'800 bytes
MD5 hash:	16FF3CC6CC330A08EED70CBC1D35F5D2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	08:31:53
Start date:	07/10/2024
Path:	C:\Windows\SysWOW64\7za.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\lshlpu2r.eym" "C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip"
Imagebase:	0xf60000
File size:	289'792 bytes
MD5 hash:	77E556CDFDC5C592F5C46DB4127C6F4C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	08:31:53
Start date:	07/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	08:31:54
Start date:	07/10/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"cmd.exe" /C "C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe"
Imagebase:	0x240000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	08:31:54
Start date:	07/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	08:31:54
Start date:	07/10/2024
Path:	C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe
Imagebase:	0x1c0000
File size:	17'179'136 bytes
MD5 hash:	535493301BD9D97316DA66C0750E6167
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	21.6%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	73
Total number of Limit Nodes:	4

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 0134B1D6 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0134B208

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 3f6385ae215d9ba36ed4489cdb035835bf3793e90d5974d407a11d585be529b4
Instruction ID: c7a0f3e9896b0608ecf213a875868c15016ef7795eb3bda6ad25fc6de3368d4c
Opcode Fuzzy Hash: 3f6385ae215d9ba36ed4489cdb035835bf3793e90d5974d407a11d585be529b4
Instruction Fuzzy Hash: 5401AD709002448FEB10CF59E889769FBE8EF04224F48C4AADD488F65AD279E404CFB2

Function 05420799 Relevance: 4.0, Strings: 3, Instructions: 282
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

:@8j, xrefs: 054208B5
\O_j, xrefs: 05420966
:@8j, xrefs: 05420822

Memory Dump Source

Source File: 00000005.00000002.1903741502.0000000005420000.00000040.00000800.00020000.00000000.sdmp, Offset: 05420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5420000_unarchiver.jbxd

Similarity

API ID:
String ID: :@8j$:@8j$\O_j
API String ID: 0-222703353
Opcode ID: a8d7c256133ff0e4d2a9d542cb5d752cd5255c47ab649d8ef59539799b0c3ca6
Instruction ID: 3c38714549ffa6af340b449a0903123a8fa59b91e820fa520f2b5d88fcbf354c
Opcode Fuzzy Hash: a8d7c256133ff0e4d2a9d542cb5d752cd5255c47ab649d8ef59539799b0c3ca6
Instruction Fuzzy Hash: 95A16C34B012248BDB15DBA8949C77EB7E3FBC8308F558069D90A97396DF389C428B61

Function 0134B246 Relevance: 1.6, APIs: 1, Instructions: 101
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0134B2F3

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 67ed76c227f263ec660df8894d83d5906f6433a864aa9eff1304337e84583e6a
Instruction ID: 3fa45eefdb20f11ffd52264e4bcd5bedffdb4efac8959cbfa3806f35d3073733
Opcode Fuzzy Hash: 67ed76c227f263ec660df8894d83d5906f6433a864aa9eff1304337e84583e6a
Instruction Fuzzy Hash: E731B2B1504344AFEB228B65DC45FAABFBCEF05214F04849AE985CB162D764A909CB71

Function 0134AD04 Relevance: 1.6, APIs: 1, Instructions: 96
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0134ADA7

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: aac1e400b7c1715e43b585a187afa37dd02bff13cb4494844ca39628adb56e2a
Instruction ID: 9edf6e717618d8e134ae607a0fddd134f1cb997ed06e4ec21daaa1d9b6c5ef00
Opcode Fuzzy Hash: aac1e400b7c1715e43b585a187afa37dd02bff13cb4494844ca39628adb56e2a
Instruction Fuzzy Hash: BD31B371504344AFEB228B65DC45FABBFFCEF05214F04889AF985DB152D724A509CB71

Function 0134AB76 Relevance: 1.6, APIs: 1, Instructions: 93
pipeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreatePipe.KERNELBASE(?,00000E24,?,?), ref: 0134AC36

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: CreatePipe
String ID:
API String ID: 2719314638-0
Opcode ID: 993f0fc6a0188539e7c0aa43c1ebd806262e36613f31a45079f9cd3f9883c752
Instruction ID: 4b22a4a65e31203778387bd7db29e21bf4ae44f77f344f3cd744604ad5c5b830
Opcode Fuzzy Hash: 993f0fc6a0188539e7c0aa43c1ebd806262e36613f31a45079f9cd3f9883c752
Instruction Fuzzy Hash: 9F31AF7150E3C06FD3138B218C65B66BFB4AF47610F0A85DBE8C48F1A3D6286909C7A2

Function 0134A5DC Relevance: 1.6, APIs: 1, Instructions: 90
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0134A67D

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: be51744c200b7530f6fc22b9a285cfe24cbefdb411a3c2c12ca9487aa738a7b3
Instruction ID: ae8ce1c77642a0cf4f73734385f5df131baf4daf176804425330d11da6bd82a8
Opcode Fuzzy Hash: be51744c200b7530f6fc22b9a285cfe24cbefdb411a3c2c12ca9487aa738a7b3
Instruction Fuzzy Hash: 9F318DB1505340AFE722CF65DD44F66BFE8EF49224F08889EE9858B252D375E809CB71

Function 0134A120 Relevance: 1.6, APIs: 1, Instructions: 83
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindNextFileW.KERNELBASE(?,00000E24,?,?), ref: 0134A1C2

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: 1181d5bbf4b47cc83591cdb93586faa1a09349e5333953c078731e5b0d1bfbb4
Instruction ID: 89d28a4df079a28337677323bbd01ce2ad3423043ec065e42c9f67d9343d3e58
Opcode Fuzzy Hash: 1181d5bbf4b47cc83591cdb93586faa1a09349e5333953c078731e5b0d1bfbb4
Instruction Fuzzy Hash: BA21E57150D3C06FD3128B258C51B66BFB4EF47610F0941DBE984CF193D225A909CBA2

Function 0134AD2A Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0134ADA7

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 5b494404fd3475f8ae86d5b6a06d30278bef87311178141165066f3700c8a8aa
Instruction ID: 2bca0903f46f325f9b2e0b72f5b3946dac039f550db7455f979b6a627e607292
Opcode Fuzzy Hash: 5b494404fd3475f8ae86d5b6a06d30278bef87311178141165066f3700c8a8aa
Instruction Fuzzy Hash: DA21E271500304AFFB218F64DC45FABFBECEF08214F04881AE9858B552D735A4098B71

Function 0134B276 Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0134B2F3

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: dfbc09a4d5a0b8da88740f58c7936b8cad3bbcf76e74526a5334ffe044793906
Instruction ID: f7161b8359326e1c361398532c9069b128c4d51c608f5a2943547c4843ba4d26
Opcode Fuzzy Hash: dfbc09a4d5a0b8da88740f58c7936b8cad3bbcf76e74526a5334ffe044793906
Instruction Fuzzy Hash: 2C21E071500304AFFB219F65DC44FAAFBECEF08214F04882AE9458B556D775E5088BB6

Function 0134A370 Relevance: 1.6, APIs: 1, Instructions: 80
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,773E3102,00000000,00000000,00000000,00000000), ref: 0134A40C

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 86f7f6ef9ff4078f38340121c45f8077f5f9e56bc415ea414f3eaa18e7abdbfb
Instruction ID: c8e12bdfc598e13d7f4dfe1d0bc0b50f9482a82a2c13ab19e82fb0b0ac5665cf
Opcode Fuzzy Hash: 86f7f6ef9ff4078f38340121c45f8077f5f9e56bc415ea414f3eaa18e7abdbfb
Instruction Fuzzy Hash: E5217CB5504740AFE721CB15DC84FA6BBF8AF05614F08849AE9858B252D364E909CB62

Function 0134A850 Relevance: 1.6, APIs: 1, Instructions: 78
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFilePointer.KERNELBASE(?,00000E24,773E3102,00000000,00000000,00000000,00000000), ref: 0134A8DE

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: 86023a05da5860f121aa9107f966798da49f3d897f83793fa3fcf2bd4b3e0492
Instruction ID: 3a85636bc4b8e02f95743167a11a970073064421bcbba14cd47e448dbb5c4a57
Opcode Fuzzy Hash: 86023a05da5860f121aa9107f966798da49f3d897f83793fa3fcf2bd4b3e0492
Instruction Fuzzy Hash: EB21D375409380AFEB228B54DC44FA6BFB8EF46714F0984DAE984CF153C265A909CB72

Function 0134A933 Relevance: 1.6, APIs: 1, Instructions: 77
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteFile.KERNELBASE(?,00000E24,773E3102,00000000,00000000,00000000,00000000), ref: 0134A9C1

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: ff597eeadc75aa1e7ded5793b9f3d25d7f417e0af360600cce303101a1f2623f
Instruction ID: 36738a6c948f54e667a62d0688aec8c91bb76996646793263239782809eded60
Opcode Fuzzy Hash: ff597eeadc75aa1e7ded5793b9f3d25d7f417e0af360600cce303101a1f2623f
Instruction Fuzzy Hash: A8219071409380AFEB22CF65DC44F96BFB8EF46314F08859AE9859F153C365A509CBB2

Function 0134A5FE Relevance: 1.6, APIs: 1, Instructions: 76
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0134A67D

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: ab4a802520ed47f4173dfd163f6f4fb8a3b7a6e47fbd4299dec88655efe27b1d
Instruction ID: 83fa8000e43092fac4a6becf162b2c4ecefb7a7d8ab22dd9ea6a7e428af8fc6f
Opcode Fuzzy Hash: ab4a802520ed47f4173dfd163f6f4fb8a3b7a6e47fbd4299dec88655efe27b1d
Instruction Fuzzy Hash: 7B219C71500204AFF721CF65DD45B66FBE8EF08224F088869E9868B652D775E409CB76

Function 0134A78F Relevance: 1.6, APIs: 1, Instructions: 73
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNELBASE(?,00000E24,773E3102,00000000,00000000,00000000,00000000), ref: 0134A815

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: babe1704f55453a9c1b2621a9567ec5057fad5a6038145ed1173cd1e4cb52682
Instruction ID: 12f78418e4f336dd1e01665dfefa0a14b8e0e112c11d566043ad24771e3a740d
Opcode Fuzzy Hash: babe1704f55453a9c1b2621a9567ec5057fad5a6038145ed1173cd1e4cb52682
Instruction Fuzzy Hash: 5321D5B54093806FF7128B11DC44BA6BFB8DF46714F0980DAE9858F193D364A909C772

Function 0134AA0B Relevance: 1.6, APIs: 1, Instructions: 70
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateDirectoryW.KERNELBASE(?,?), ref: 0134AA8B

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: 909b92f4c9024038ad699bdeb98e04654d4d1bf26934c656f3929e6c5eadb8f4
Instruction ID: 443db3e28ce7d84e7235fe8316352561332f1a643f55524b3a704b9942a20988
Opcode Fuzzy Hash: 909b92f4c9024038ad699bdeb98e04654d4d1bf26934c656f3929e6c5eadb8f4
Instruction Fuzzy Hash: B5219FB55093C05FEB12CB29DC55B92BFE8AF06314F0D84EAE985CF193D225E909CB61

Function 0134A392 Relevance: 1.6, APIs: 1, Instructions: 69
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,773E3102,00000000,00000000,00000000,00000000), ref: 0134A40C

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 368b4d0e41b6e4217835b068b2e6e2a080611a5f09443383f933d32cc6470a87
Instruction ID: 6e14932e4776159ba2e7b7da43333cdd46c630afc1aabaf2195eaa02f173186f
Opcode Fuzzy Hash: 368b4d0e41b6e4217835b068b2e6e2a080611a5f09443383f933d32cc6470a87
Instruction Fuzzy Hash: 62218C75600704AFEB21CE15DC88FA6BBECEF04614F08845AE9469B652D764F809CA76

Function 0134A962 Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE(?,00000E24,773E3102,00000000,00000000,00000000,00000000), ref: 0134A9C1

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: 4f986b4629ab3fae8e08bf7ea6fc51e7c33aa8358d4d6fb2032d4e94176c9e15
Instruction ID: b893915407296581357340b7c71845c04dd622043d9e4abe63b04c0b4cce32a6
Opcode Fuzzy Hash: 4f986b4629ab3fae8e08bf7ea6fc51e7c33aa8358d4d6fb2032d4e94176c9e15
Instruction Fuzzy Hash: 9911C175500304AFFB21CF55DC44FAAFBE8EF04728F08845AE9468B652C775A548CBB6

Function 0134A882 Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(?,00000E24,773E3102,00000000,00000000,00000000,00000000), ref: 0134A8DE

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: 32d04cc2b7dc9c557e8469a8d21986a02bcc5bdb097c0bb459729ece5320fed2
Instruction ID: 79b7c3c7a8af584d42082f50ec05afc7cf7441b92e70bcaa0414f77eac41bc38
Opcode Fuzzy Hash: 32d04cc2b7dc9c557e8469a8d21986a02bcc5bdb097c0bb459729ece5320fed2
Instruction Fuzzy Hash: C0110171500304AFFB21CF54DC44B66FBE8EF44324F04845AE9458B242C775A5098BB6

Function 0134A2AE Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0134A30C

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 0b784364c80cd97de7bca5b9374504c97d23bb5dbae0e433747b8636367cebcb
Instruction ID: 65e3e3c52cdce37fec701f01e4b56d8084fc063ed516379a52ad99ef68f95d59
Opcode Fuzzy Hash: 0b784364c80cd97de7bca5b9374504c97d23bb5dbae0e433747b8636367cebcb
Instruction Fuzzy Hash: 3411A0754093C09FDB238B25DC54A92BFF4DF07224F0980DBED858F263D265A809CB62

Function 0134B1B4 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0134B208

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: b596d0c4b64b7f0aea447a1839c3f7a944287122047594057b91a75656d1ec5c
Instruction ID: 99719feca2feed24cdb59d65b6ae4574aae8918f77bab58dcefb31311907489b
Opcode Fuzzy Hash: b596d0c4b64b7f0aea447a1839c3f7a944287122047594057b91a75656d1ec5c
Instruction Fuzzy Hash: C0115E715093809FDB128F25DC44B56FFA4DF46224F0884DAED849F257D275A908CB62

Function 0134AF8B Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?), ref: 0134AFE4

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: ec545b320223b854fbb09294e13212d2698f475b79a359774e325b005328ad84
Instruction ID: 80b62bce3be77fcd8c7232cfb010169451e5d5c5915a37c0bde113a49aaa76b4
Opcode Fuzzy Hash: ec545b320223b854fbb09294e13212d2698f475b79a359774e325b005328ad84
Instruction Fuzzy Hash: 9E11A0715093C09FD7128B25DC45B52FFF4EF06220F0984DEED858B263D365A808DB62

Function 0134AA46 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,?), ref: 0134AA8B

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: 591611a182d4eb07980e97b6153257088b119402dc021ea02c05f7851c7c4f78
Instruction ID: 255146b4c264378153c41f542f05d819c2d632e9cb2cfc45f72ba7fcfaab51a0
Opcode Fuzzy Hash: 591611a182d4eb07980e97b6153257088b119402dc021ea02c05f7851c7c4f78
Instruction Fuzzy Hash: 4711A1716002449FFB10CF19D984B66FBD8EF04224F08C4AADD4ACB642E775E504CF61

Function 0134A7C2 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,773E3102,00000000,00000000,00000000,00000000), ref: 0134A815

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 2e0a7ac47f7e3114cf951c73aae6e1ff0cefd6b1e113dbf8383e545613f83175
Instruction ID: 30d17433c915b3c3259bf3c4b719937587a3be1846832d20ed95aa2584c1a62e
Opcode Fuzzy Hash: 2e0a7ac47f7e3114cf951c73aae6e1ff0cefd6b1e113dbf8383e545613f83175
Instruction Fuzzy Hash: 2701C071504304AFF721CB05DC89BA6BFECDF04628F04C09AED458B282D779A8098AB6

Function 0134A172 Relevance: 1.5, APIs: 1, Instructions: 47fileCOMMON

Download Yara Rule

APIs

FindNextFileW.KERNELBASE(?,00000E24,?,?), ref: 0134A1C2

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: 292ca34e4c4065e026cc3196cec9f39a49d2aeff909aeb560d6dfdef0ec8a7a3
Instruction ID: a5aa201aa29b900e5799484b9394aadbf25fb83daf424c04ab9228e98c15eff3
Opcode Fuzzy Hash: 292ca34e4c4065e026cc3196cec9f39a49d2aeff909aeb560d6dfdef0ec8a7a3
Instruction Fuzzy Hash: 6501B171600200ABD310DF16CC46B26FBE8EB88A20F14815AEC089B641D775B911CBE2

Function 0134ABE6 Relevance: 1.5, APIs: 1, Instructions: 47pipeCOMMON

Download Yara Rule

APIs

CreatePipe.KERNELBASE(?,00000E24,?,?), ref: 0134AC36

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: CreatePipe
String ID:
API String ID: 2719314638-0
Opcode ID: a215dfaf2d049633f7a621ffeb6f31fc002128a0efa58487d8607c7dc4ffb9a9
Instruction ID: 1a53a15dfba37d55bd500f5baf5306350466aefa770fba623072bb53a9887f60
Opcode Fuzzy Hash: a215dfaf2d049633f7a621ffeb6f31fc002128a0efa58487d8607c7dc4ffb9a9
Instruction Fuzzy Hash: D601B171600200ABD350DF16CC46B26FBE8FB88A20F14815AEC489B641D775B915CBE2

Function 0134AFB2 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?), ref: 0134AFE4

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: 5249bf6632d0b1852923f3f9db26149087f9d66d9e6a3cf9fa2791af2a8c5878
Instruction ID: 48a6cea3d3dd0d1c3ac4574b2054f0d9582fe224457459f23e9cabf5c9b37645
Opcode Fuzzy Hash: 5249bf6632d0b1852923f3f9db26149087f9d66d9e6a3cf9fa2791af2a8c5878
Instruction Fuzzy Hash: 8601F4745003448FEB108F19DC857A6FBE4EF04224F08C0AADD4A8F792D776E848DEA2

Function 0134A2DA Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0134A30C

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 92f479af6efd6e43fe68631b6ade0dc45fc128739bb4fb6e89b6ad32932a0d89
Instruction ID: d928e3c9efe7476dd5d7be396a0ffc18a17b7019ca88dbbb70178e143c8db238
Opcode Fuzzy Hash: 92f479af6efd6e43fe68631b6ade0dc45fc128739bb4fb6e89b6ad32932a0d89
Instruction Fuzzy Hash: F5F0AF34504244CFEB20DF06D889765FBE4EF04624F48C09ADD4A4F656E3B9A404CEA2

Function 0134A6D4 Relevance: 1.3, APIs: 1, Instructions: 68COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0134A748

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 0a9953a67256cc88c9bc945b6ad326af22db4dced6c3c0de579d605069ae80ea
Instruction ID: 7bd79b361acd9bd3c8fb1d764774c71d8cd25ecb38f9773d891752e341ebd3c6
Opcode Fuzzy Hash: 0a9953a67256cc88c9bc945b6ad326af22db4dced6c3c0de579d605069ae80ea
Instruction Fuzzy Hash: B22192B55097C09FD7128B29DC95792BFB4EF46320F0980DADC858F5A3D264A909C772

Function 0134A716 Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0134A748

Memory Dump Source

Source File: 00000005.00000002.1902396678.000000000134A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0134A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_134a000_unarchiver.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 6e44e6ded5213cfc24d84454517b141a5f8093721e81a14c26500020f3cbb2b3
Instruction ID: 1297ccc9dcf0bc22d02663c5e2531829ca693ece87dbbfe12df306ce64812b58
Opcode Fuzzy Hash: 6e44e6ded5213cfc24d84454517b141a5f8093721e81a14c26500020f3cbb2b3
Instruction Fuzzy Hash: D901DF70A002448FEB20CF59D885766FFE8DF04224F08C4AEDD4A8F652D279A804CEA2

Function 054202C0 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1903741502.0000000005420000.00000040.00000800.00020000.00000000.sdmp, Offset: 05420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5420000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d469ce5fcb755f52896fff2df037e0bc87b0f827fc98bee93a36133b83af35c
Instruction ID: ec276bbe92ee43e91aed6f5c41b98282379c8f1e9aa8697e54cd18ac51ecdc79
Opcode Fuzzy Hash: 8d469ce5fcb755f52896fff2df037e0bc87b0f827fc98bee93a36133b83af35c
Instruction Fuzzy Hash: 2BB13B34702220CFC729DB68E85CA6E77F6FF98750B5180A9E9079B355DB349C01CBA1

Function 05420C99 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1903741502.0000000005420000.00000040.00000800.00020000.00000000.sdmp, Offset: 05420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5420000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e28d464c8dc0528ffcaac8ba10908864045c9739f00f6054a71953a4f5beb0d0
Instruction ID: 4345727e26f572eb9314952e08b5f8f7ce7e564c3937746a4b8a4b66b432c0fe
Opcode Fuzzy Hash: e28d464c8dc0528ffcaac8ba10908864045c9739f00f6054a71953a4f5beb0d0
Instruction Fuzzy Hash: 86213E347007108FC755EB79940866F7BE7AFC5218B85842DD446DB342EF36DD028B92

Function 05420CA8 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1903741502.0000000005420000.00000040.00000800.00020000.00000000.sdmp, Offset: 05420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5420000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e0ce3e5967c21a60a236db42f369547e94207a85604c105087e61b22b681b14
Instruction ID: 884f04345119b9150f10c8d42dfc1f621774d82684fed4c5e7337f29709b7233
Opcode Fuzzy Hash: 0e0ce3e5967c21a60a236db42f369547e94207a85604c105087e61b22b681b14
Instruction Fuzzy Hash: 73210B347007148BC715EB7AE4486AFBBD7AFC5618B85842CD446DB342EF75ED028B92

Function 05420B8F Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1903741502.0000000005420000.00000040.00000800.00020000.00000000.sdmp, Offset: 05420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5420000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a82bf91a54d36f25799ff52c7e97616c562ad530b4abe45ae8fb10be77cb7097
Instruction ID: bf267c75ace3632d28a0de29e49f831c755ef6aa180c47008e4c127f93b40562
Opcode Fuzzy Hash: a82bf91a54d36f25799ff52c7e97616c562ad530b4abe45ae8fb10be77cb7097
Instruction Fuzzy Hash: 11118131B10118AFCB06DBB8E84889E7BF2FFC8214B164479E606EB267DF319C058790

Function 05420BA0 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1903741502.0000000005420000.00000040.00000800.00020000.00000000.sdmp, Offset: 05420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5420000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 096b9e0cb976a920c088a6d2026fbf35fe9ea9e1a24b097453b93817a645870a
Instruction ID: 76a775992427fff49fb78aaf65b89f8b5150c054e33c46d71e23177ebd68e282
Opcode Fuzzy Hash: 096b9e0cb976a920c088a6d2026fbf35fe9ea9e1a24b097453b93817a645870a
Instruction Fuzzy Hash: F0114231B10118AFCB15DBB8D8489DE7BF6FFC8214B164475E606EB266DF319C058790

Function 013D082E Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1902904669.00000000013D0000.00000040.00000020.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_13d0000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90ab19c1a6fdc9994f3f29e044dae2650398d1487cade04d986b556a90dfd371
Instruction ID: f8299b5f454ee29582f39e8dd6242d7b9bd527370fc08ba4f0b7e381bf8ee981
Opcode Fuzzy Hash: 90ab19c1a6fdc9994f3f29e044dae2650398d1487cade04d986b556a90dfd371
Instruction Fuzzy Hash: 22F082B2909214AF9200DF15ED46856FBECDF84521F04C52EEC488B300E27AA9154AE2

Function 05420C50 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1903741502.0000000005420000.00000040.00000800.00020000.00000000.sdmp, Offset: 05420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5420000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1926fb1e2fad55b28be1bf51046436359b2f267483a838ebf5cfdeb9ce21c587
Instruction ID: 9bbd23fa1ef5c836c758d182851d8d87cc98e7533b00420cfec0ba4acbb23db2
Opcode Fuzzy Hash: 1926fb1e2fad55b28be1bf51046436359b2f267483a838ebf5cfdeb9ce21c587
Instruction Fuzzy Hash: 61E09A72F203542FCB85DAB884541AE7FE6ABC5264B5244BAD009E3282EE358C028B40

Function 013D0606 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1902904669.00000000013D0000.00000040.00000020.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_13d0000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45e7e8c14a6bc88dc32249f843ebb473b8f805d3bbc827e1a09b05849d45fbd3
Instruction ID: cc31e6067d6cfa990dc5dd3cffa1acbeb16727e774ab14c63c63ca46b83ccbfe
Opcode Fuzzy Hash: 45e7e8c14a6bc88dc32249f843ebb473b8f805d3bbc827e1a09b05849d45fbd3
Instruction Fuzzy Hash: 86E092B66006008B9750DF0BFC41452F7D8EB84630B48C07FDC0D8B701D679B905CEA6

Function 05420C60 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1903741502.0000000005420000.00000040.00000800.00020000.00000000.sdmp, Offset: 05420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5420000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76bac4b4252bd0ed97bda9a8c9bc212f4857ee7ca33c429c3e27c9df830dbcb0
Instruction ID: 3e4fa4032b896914596e74032e8221e26b7eae38940944faac050cccff5323b5
Opcode Fuzzy Hash: 76bac4b4252bd0ed97bda9a8c9bc212f4857ee7ca33c429c3e27c9df830dbcb0
Instruction Fuzzy Hash: 06D05B32F002186B8B54DFF9585459F7BEAABC4154B564479D109D7342EF31DC4187D0

Function 013423F4 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1902354420.0000000001342000.00000040.00000800.00020000.00000000.sdmp, Offset: 01342000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_1342000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4504afd0a2c30f68356a679acef9154e474a64699aadabf39ea111f0086a0185
Instruction ID: a53f45df785666946b2f124d30471165315b9a95510a3afc3bab810ef973ec7d
Opcode Fuzzy Hash: 4504afd0a2c30f68356a679acef9154e474a64699aadabf39ea111f0086a0185
Instruction Fuzzy Hash: 33D05E792057814FE3169A1CD1A8FA63BE4AB51718F4A44F9E8009BBA3CB68E581D600

Function 05420DD1 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1903741502.0000000005420000.00000040.00000800.00020000.00000000.sdmp, Offset: 05420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5420000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a76aa009743b6bccdcb9705e15f88ecf627b96cbfbd41db2ba8544357cce5ca2
Instruction ID: 1ce8626d73f31d037f885c090422bb7e3c6325f838a062376aaee17f881e7fb1
Opcode Fuzzy Hash: a76aa009743b6bccdcb9705e15f88ecf627b96cbfbd41db2ba8544357cce5ca2
Instruction Fuzzy Hash: E3D0A7343481208FD705D774D55CBA63792ABC0309FCB84AAC80D8B6A6D634D884C340

Function 013423BC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1902354420.0000000001342000.00000040.00000800.00020000.00000000.sdmp, Offset: 01342000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_1342000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8748f3b7ff650aa997930965da6475c55ccdd0d79552232527f053f2dbb255b1
Instruction ID: acbb8862e3a1d7059bf1773e04852e4847017d305ddebcb8f5934056ba690ad5
Opcode Fuzzy Hash: 8748f3b7ff650aa997930965da6475c55ccdd0d79552232527f053f2dbb255b1
Instruction Fuzzy Hash: 3FD05E342002814FD725DA0CE2D4F5A3BE4AF40719F0644E8BC108B262C7A4E8C0CA00

Function 05420DE0 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.1903741502.0000000005420000.00000040.00000800.00020000.00000000.sdmp, Offset: 05420000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_5420000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e661447abeacff9f32af7879b7974585ab095f1bf783d838fbca66572780010a
Instruction ID: 8314b14bad1fc3d30a13d6049faf7b078fc77b76564c6e055477f74a7a4eb4ee
Opcode Fuzzy Hash: e661447abeacff9f32af7879b7974585ab095f1bf783d838fbca66572780010a
Instruction Fuzzy Hash: E4C012303442288FC70497A8D41DA6A77D66BC4304F85C0A9940D4B366DA74EC80C680

Analysis Process: terraform-docs.exePID: 6612, Parent PID: 6608COMMON

Executed Functions

Function 00238640 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1881950724.00000000001C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 001C0000, based on PE: true

Associated: 0000000A.00000002.1881928852.00000000001C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1883144685.0000000000963000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1883878102.000000000113A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1883933743.000000000113B000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1883969968.0000000001142000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1883994329.0000000001146000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884050366.0000000001147000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884113303.00000000011A1000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884184875.00000000011A5000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884231004.00000000011A7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884260250.00000000011A8000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884337330.00000000011AA000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884377814.00000000011BC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884447560.00000000011BF000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884528068.00000000011C0000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884652210.00000000011C1000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884733365.00000000011C4000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884811178.00000000011CA000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884890647.00000000011CB000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884981024.00000000011CC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885100376.00000000011CE000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885155337.00000000011CF000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885155337.00000000011EC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885155337.00000000011F2000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885155337.000000000121A000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885350992.0000000001229000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885395514.0000000001259000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885424104.000000000125A000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1c0000_terraform-docs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07d72e8c4ef3cb1d486a9b3014eaac2eb9fc3ce190e5215e0fe856548d3e1b51
Instruction ID: ba64bd312f6f6388d37bb309e2a5255a5ad71de2d085e79819850c2d5470b1f4
Opcode Fuzzy Hash: 07d72e8c4ef3cb1d486a9b3014eaac2eb9fc3ce190e5215e0fe856548d3e1b51
Instruction Fuzzy Hash: 2D31986791CFC482D3218B24F5413AAB364F7A9784F15A715EFC812A1ADF38E2E5CB40

Function 002349A0 Relevance: .0, Instructions: 2COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1881950724.00000000001C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 001C0000, based on PE: true

Associated: 0000000A.00000002.1881928852.00000000001C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1883144685.0000000000963000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1883878102.000000000113A000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1883933743.000000000113B000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1883969968.0000000001142000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1883994329.0000000001146000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884050366.0000000001147000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884113303.00000000011A1000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884184875.00000000011A5000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884231004.00000000011A7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884260250.00000000011A8000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884337330.00000000011AA000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884377814.00000000011BC000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884447560.00000000011BF000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884528068.00000000011C0000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884652210.00000000011C1000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884733365.00000000011C4000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884811178.00000000011CA000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884890647.00000000011CB000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1884981024.00000000011CC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885100376.00000000011CE000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885155337.00000000011CF000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885155337.00000000011EC000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885155337.00000000011F2000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885155337.000000000121A000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885350992.0000000001229000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885395514.0000000001259000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 0000000A.00000002.1885424104.000000000125A000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1c0000_terraform-docs.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8927acf9aebbe99a23efce72f651126bf8ee862aa5c0cadc218ae9352963861
Instruction ID: 48c29e22eca71ffef20326d465acb6269a62aa30c3d2f0c902b6dfba435ac099
Opcode Fuzzy Hash: d8927acf9aebbe99a23efce72f651126bf8ee862aa5c0cadc218ae9352963861
Instruction Fuzzy Hash:

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://github.com/terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-windows-amd64.zip

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\LICENSE

C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\README.md

C:\Users\user\AppData\Local\Temp\lshlpu2r.eym\terraform-docs.exe

C:\Users\user\AppData\Local\Temp\unarchiver.log

C:\Users\user\Downloads\aa6327d2-dd0f-4b5a-a9bb-eccfcc8f59a4.tmp

C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip (copy)

C:\Users\user\Downloads\terraform-docs-v0.19.0-windows-amd64.zip.crdownload

Chrome Cache Entry: 51

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

Windows Analysis Report
https://github.com/terraform-docs/terraform-docs/releases/download/v0.19.0/terraform-docs-v0.19.0-windows-amd64.zip

Function 05420799 Relevance: 4.0, Strings: 3, Instructions: 282
COMMON

Function 0134B246 Relevance: 1.6, APIs: 1, Instructions: 101
COMMON

Function 0134AD04 Relevance: 1.6, APIs: 1, Instructions: 96
COMMON

Function 0134AB76 Relevance: 1.6, APIs: 1, Instructions: 93
pipeCOMMON

Function 0134A5DC Relevance: 1.6, APIs: 1, Instructions: 90
fileCOMMON

Function 0134A120 Relevance: 1.6, APIs: 1, Instructions: 83
fileCOMMON

Function 0134AD2A Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Function 0134B276 Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Function 0134A370 Relevance: 1.6, APIs: 1, Instructions: 80
registryCOMMON

Function 0134A850 Relevance: 1.6, APIs: 1, Instructions: 78
COMMON

Function 0134A933 Relevance: 1.6, APIs: 1, Instructions: 77
fileCOMMON

Function 0134A5FE Relevance: 1.6, APIs: 1, Instructions: 76
fileCOMMON

Function 0134A78F Relevance: 1.6, APIs: 1, Instructions: 73
COMMON

Function 0134AA0B Relevance: 1.6, APIs: 1, Instructions: 70
COMMON

Function 0134A392 Relevance: 1.6, APIs: 1, Instructions: 69
registryCOMMON