Edit tour

Windows Analysis Report
http://userer.gotoassist.com

Overview

General Information

Sample URL:	http://userer.gotoassist.com
Analysis ID:	1528268
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 3936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2028,i,466579838678521311,16064752721176592747,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6804 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://userer.gotoassist.com" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.goto.com/it-management/resolve?utm_source=get.gotoassist.com&utm_medium=referral&utm_campaign=GTA_migration_customer

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.10:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.10:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.10:58920 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.10:54695 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.10:58799 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: userer.gotoassist.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.gotoassist.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /remote_support/ HTTP/1.1Host: www.gotoassist.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: userer.gotoassist.com
Source: global traffic	DNS traffic detected: DNS query: www.gotoassist.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: get.gotoassist.com
Source: global traffic	DNS traffic detected: DNS query: www.goto.com
Source: global traffic	DNS traffic detected: DNS query: 198.187.3.20.in-addr.arpa

Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 58891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 58810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 58844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 58901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 58845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 58868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 58821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 58809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 58866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 58889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58899
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 58823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 58890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 58867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 58822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 58871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58905
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58902
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58901
Source: unknown	Network traffic detected: HTTP traffic on port 58838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58904
Source: unknown	Network traffic detected: HTTP traffic on port 58873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58900
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58913
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58912
Source: unknown	Network traffic detected: HTTP traffic on port 58906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58915
Source: unknown	Network traffic detected: HTTP traffic on port 58874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58914
Source: unknown	Network traffic detected: HTTP traffic on port 58851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58910
Source: unknown	Network traffic detected: HTTP traffic on port 58919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58809
Source: unknown	Network traffic detected: HTTP traffic on port 58896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58802
Source: unknown	Network traffic detected: HTTP traffic on port 58920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58804
Source: unknown	Network traffic detected: HTTP traffic on port 58815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58920
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58921
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58854
Source: unknown	Network traffic detected: HTTP traffic on port 58853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58853
Source: unknown	Network traffic detected: HTTP traffic on port 58830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58856
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58862
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58868
Source: unknown	Network traffic detected: HTTP traffic on port 58922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58864
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58867
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58874
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58873
Source: unknown	Network traffic detected: HTTP traffic on port 58876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58870
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58879
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58877
Source: unknown	Network traffic detected: HTTP traffic on port 58806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58883
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58882
Source: unknown	Network traffic detected: HTTP traffic on port 58829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58884
Source: unknown	Network traffic detected: HTTP traffic on port 58911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58881
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58880
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58890
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58892
Source: unknown	Network traffic detected: HTTP traffic on port 58899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 58843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58818
Source: unknown	Network traffic detected: HTTP traffic on port 58923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58814
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58812
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54699
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 58898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 58886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 58863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 58808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58821
Source: unknown	Network traffic detected: HTTP traffic on port 58852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58822
Source: unknown	Network traffic detected: HTTP traffic on port 58831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58830
Source: unknown	Network traffic detected: HTTP traffic on port 58912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.10:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.10:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.10:58920 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_3852_847197907

Jump to behavior

Source: classification engine

Classification label: clean2.win@23/13@12/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2028,i,466579838678521311,16064752721176592747,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://userer.gotoassist.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2028,i,466579838678521311,16064752721176592747,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://gliadomain.com	0%	URL Reputation	safe
https://poalim.xyz	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://reshim.org	0%	URL Reputation	safe
https://nourishingpursuits.com	0%	URL Reputation	safe
https://medonet.pl	0%	URL Reputation	safe
https://unotv.com	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
https://zdrowietvn.pl	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://songstats.com	0%	URL Reputation	safe
https://baomoi.com	0%	URL Reputation	safe
https://supereva.it	0%	URL Reputation	safe
https://elfinancierocr.com	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://rws1nvtvt.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://hearty.gift	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://heartymail.com	0%	URL Reputation	safe
https://p106.net	0%	URL Reputation	safe
https://radio2.be	0%	URL Reputation	safe
https://finn.no	0%	URL Reputation	safe
https://hc1.com	0%	URL Reputation	safe
https://kompas.tv	0%	URL Reputation	safe
https://mystudentdashboard.com	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://smaker.pl	0%	URL Reputation	safe
https://mercadopago.com.mx	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://talkdeskqaid.com	0%	URL Reputation	safe
https://mercadopago.com.pe	0%	URL Reputation	safe
https://cardsayings.net	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://pudelek.pl	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://cookreactor.com	0%	URL Reputation	safe
https://wildixin.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://cognitiveai.ru	0%	URL Reputation	safe
https://nacion.com	0%	URL Reputation	safe
https://chennien.com	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
https://deccoria.pl	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
https://talkdeskstgid.com	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://carcostadvisor.be	0%	URL Reputation	safe
https://salemovetravel.com	0%	URL Reputation	safe
https://sapo.io	0%	URL Reputation	safe
https://wpext.pl	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://poalim.site	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://smpn106jkt.sch.id	0%	URL Reputation	safe
https://elpais.uy	0%	URL Reputation	safe
https://landyrev.com	0%	URL Reputation	safe
https://the42.ie	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://tucarro.com.ve	0%	URL Reputation	safe
https://rws3nvtvt.com	0%	URL Reputation	safe
https://eleconomista.net	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	URL Reputation	safe
https://clmbtech.com	0%	URL Reputation	safe
https://standardsandpraiserepurpose.com	0%	URL Reputation	safe
https://salemovefinancial.com	0%	URL Reputation	safe
https://mercadopago.com.br	0%	URL Reputation	safe
https://commentcamarche.net	0%	URL Reputation	safe
https://etfacademy.it	0%	URL Reputation	safe
https://mighty-app.appspot.com	0%	URL Reputation	safe
https://hj.rs	0%	URL Reputation	safe
https://hearty.me	0%	URL Reputation	safe
https://mercadolibre.com.gt	0%	URL Reputation	safe
https://timesinternet.in	0%	URL Reputation	safe
https://indiatodayne.in	0%	URL Reputation	safe
https://idbs-staging.com	0%	URL Reputation	safe
https://blackrock.com	0%	URL Reputation	safe
https://idbs-eworkbook.com	0%	URL Reputation	safe
https://motherandbaby.com	0%	URL Reputation	safe
https://mercadolibre.co.cr	0%	URL Reputation	safe
https://hjck.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
userer.gotoassist.com	216.219.112.116	true	false	unknown
www.gotoassist.com	216.219.112.176	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
get.gotoassist.com	unknown	unknown	false	unknown
www.goto.com	unknown	unknown	false	unknown
198.187.3.20.in-addr.arpa	unknown	unknown	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	URL Reputation: safe	unknown
https://gliadomain.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.xyz	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolivre.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://reshim.org	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nourishingpursuits.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://unotv.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.cc	sets.json.0.dr	false		unknown
https://zdrowietvn.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://johndeere.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songstats.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://baomoi.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://supereva.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://bolasport.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws1nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://desimartini.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.gift	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://heartymail.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.0.dr	false		unknown
https://p106.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://radio2.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://finn.no	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hc1.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mystudentdashboard.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smaker.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.0.dr	false	URL Reputation: safe	unknown
https://p24.hu	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskqaid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://24.hu	sets.json.0.dr	false		unknown
https://mercadopago.com.pe	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cardsayings.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://text.com	sets.json.0.dr	false		unknown
https://mightytext.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hazipatika.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wildixin.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitiveai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nacion.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://chennien.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.travel	sets.json.0.dr	false	URL Reputation: safe	unknown
https://deccoria.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskstgid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://naukri.com	sets.json.0.dr	false		unknown
https://interia.pl	sets.json.0.dr	false		unknown
https://bonvivir.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://salemovetravel.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wpext.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://welt.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.site	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://infoedgeindia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitive-ai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://graziadaily.co.uk	sets.json.0.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smpn106jkt.sch.id	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elpais.uy	sets.json.0.dr	false	URL Reputation: safe	unknown
https://landyrev.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://the42.ie	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://tucarro.com.ve	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eleconomista.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://helpdesk.com	sets.json.0.dr	false		unknown
https://mercadolivre.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://clmbtech.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://07c225f3.online	sets.json.0.dr	false		unknown
https://salemovefinancial.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://etfacademy.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mighty-app.appspot.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hj.rs	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.me	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolibre.com.gt	sets.json.0.dr	false	URL Reputation: safe	unknown
https://timesinternet.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://indiatodayne.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://idbs-staging.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrock.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://idbs-eworkbook.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://motherandbaby.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolibre.co.cr	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hjck.com	sets.json.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
216.219.112.116	userer.gotoassist.com	United States	3561	CENTURYLINK-LEGACY-SAVVISUS	false
216.58.212.132	unknown	United States	15169	GOOGLEUS	false
216.219.112.176	www.gotoassist.com	United States	3561	CENTURYLINK-LEGACY-SAVVISUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.9
192.168.2.10

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528268
Start date and time:	2024-10-07 18:01:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://userer.gotoassist.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@23/13@12/7

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.185.238, 108.177.15.84, 34.104.35.123, 20.105.155.184, 95.101.111.154, 95.101.111.137, 95.101.111.138, 95.101.111.177, 95.101.111.181, 95.101.111.139, 95.101.111.157, 95.101.111.143, 95.101.111.170, 52.149.20.212, 199.232.210.172, 52.165.164.15, 93.184.221.240, 20.3.187.198, 20.109.210.53, 216.58.206.67
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, e15661.b.akamaiedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, get-gotoassist-com.trafficmanager.net, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wildcard-san.logmein.com.edgekey.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://userer.gotoassist.com

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://www.goto.com/it-management/resolve?utm_source=get.gotoassist.com&utm_medium=referral&utm_campaign=GTA_migration_customer Model: jbxai	"{ \"brand\": [], \"contains_trigger_text\": false, \"trigger_text\": \"\", \"prominent_button_name\": \"unknown\", \"text_input_field_labels\": \"unknown\", \"pdf_icon_visible\": false, \"has_visible_captcha\": false, \"has_urgent_text\": false, \"text\": \"You don't have permission to access \"http://www.goto.com/it-management/resolve?\" on this server. Reference #18.89d01702.1728316940.4130d33 https://errors.edgesuite.net/18.89d01702.1728316940.4130d33\" } "

Input

Output

URL: https://www.goto.com/it-management/resolve?utm_source=get.gotoassist.com&utm_medium=referral&utm_campaign=GTA_migration_customer Model: jbxai

"{
   \"brand\": [],
   \"contains_trigger_text\": false,
   \"trigger_text\": \"\",
   \"prominent_button_name\": \"unknown\",
   \"text_input_field_labels\": \"unknown\",
   \"pdf_icon_visible\": false,
   \"has_visible_captcha\": false,
   \"has_urgent_text\": false,
   \"text\": \"You don't have permission to access \"http://www.goto.com/it-management/resolve?\" on this server. Reference #18.89d01702.1728316940.4130d33 https://errors.edgesuite.net/18.89d01702.1728316940.4130d33\" }
"

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 15:02:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9826635850192127
Encrypted:	false
SSDEEP:	48:8j9bdOcTlORHoidAKZdA1uehwiZUklqeh5y+3:8jichOLCy
MD5:	425C74591E6DC3F9C938F480223E4EF3
SHA1:	37214239D99924A46FA8934F356167A8D3E6747D
SHA-256:	E82EB3695EA12A895D9424BF2953E6E9DA794DF9D4966136734E3E84A8FC1ED5
SHA-512:	6594FF1179225A7DD1454427C11D2F5A6315B7F6947578D2302D2DC6EFD88E2D616E780DCA56FAB091220735268236AE5EA15D860E884D045398429AB1193007
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......G........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IGYF.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYF.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VGYF.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VGYF............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VGYI.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 15:02:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9980477973776245
Encrypted:	false
SSDEEP:	48:8t9bdOcTlORHoidAKZdA1Heh/iZUkAQkqehyy+2:8tichOF9Qry
MD5:	316D48EB9B7A51A0E2A211D329003757
SHA1:	C3B8D50BC7BE1156F19DCAB47D139C45DDA5AD25
SHA-256:	1581208756CFBBC8A3555C8BD4F84FD30B31E105A3662E4A156708334122363A
SHA-512:	BC91825F7B0E27B40DCD206FCEEE9984D8C7BDF652342638E5893786392A126B91470D3743037314EBDD22F293BCD65C3E465F4B3A9E0EAFB60A064CE386F256
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....!..G........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IGYF.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYF.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VGYF.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VGYF............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VGYI.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 08:59:33 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.008069396928089
Encrypted:	false
SSDEEP:	48:8F9bdOcTlObHoidAKZdA149eh7sFiZUkmgqeh7sUy+BX:8FichOjn2y
MD5:	CF4BED1B03F8DD5C62AC3E3D1592308A
SHA1:	D660478B6884A1DF061210FB9C7B799D8F37754E
SHA-256:	E5A2AB45B2BC738FBD7D561F472897568938468218F59D9EB676FBADDD321368
SHA-512:	8B2E29D37D1AB8CD1BCB7B1564269AB1C9B87B16F85488FA4261C3D5DEA23343179F24552A0EA49AFBE4B11B7FD6CDA424BCCFDEDF8E71549BB180D43820D080
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....K..r.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IGYF.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYF.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VGYF.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VGYF............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.L....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 15:02:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.994880109913446
Encrypted:	false
SSDEEP:	48:8M9bdOcTlORHoidAKZdA14ehDiZUkwqehey+R:8MichOW8y
MD5:	E94187C7BA459E74BEED3BC4813CE1B3
SHA1:	D82E3E2453896528F5C2D034B7C96CE0C731D445
SHA-256:	946408912E554B272ABA230B38CF1A8EF695961004F8D292B74372B98AB62DBD
SHA-512:	DBF861976EF2D5996275233976E0E46EC5A0BB2FA340F603C9706D050DA4010E4F2A127A78BC547E3AC759CA89A5DFCC4B5510F822DB02C54B0ACE72F61ADA53
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....~.G........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IGYF.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYF.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VGYF.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VGYF............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VGYI.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 15:02:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9867103484104485
Encrypted:	false
SSDEEP:	48:8J9bdOcTlORHoidAKZdA1mehBiZUk1W1qehYy+C:8JichOm94y
MD5:	755A02148B276994F63F831038955721
SHA1:	310505573F97263FC1632D3952519BF02ABB89BC
SHA-256:	FFA6E84CB38D68C15ACFD930012E934F9A2FE8D7BFA2288289E32995BD6D8399
SHA-512:	53183AD6836E639E055A4B7B3BE323C8AA817008A2B782120698EBBB9C8DA1E22BEDC07BB40E671E2A048ED581B00F8E07674CB28F512C43748B5A6B11919147
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......G........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IGYF.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYF.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VGYF.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VGYF............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VGYI.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 15:02:16 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9932032182700374
Encrypted:	false
SSDEEP:	48:8H9bdOcTlORHoidAKZdA1duT1ehOuTbbiZUk5OjqehOuTb2y+yT+:8HichOtTyTbxWOvTb2y7T
MD5:	E69EF6168FDCF289960F10CFD0FF6156
SHA1:	1D4ABE8513E661776AFD5FE1421FA09669A77BF0
SHA-256:	DBA1441BFE10DC4F28CFA45B7C60BD0C6783836CDC595FAC50226FA62E4321FF
SHA-512:	0DBBB1BAB161401DEFA364B94D73D0824EA7851E07420141523ABC4B71092DACA55B302415B177F962D58AB3E1D27EA0C23E64527AB4B38B70E351D78C099797
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....D.G........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IGYF.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGYF.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VGYF.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VGYF............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VGYI.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Reputation:	low
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	381
Entropy (8bit):	5.288096589936764
Encrypted:	false
SSDEEP:	6:wBqWekiTakpxxdGztoIhS3EavRCsDPLCmKVhXDxMvebcaS3jfU0cMhhXDxMMcT:dkK9dg5qEavcVhTKjfvhT3Y
MD5:	57119B0E54802E3E41BF480D7C7700B4
SHA1:	E331DFAE8D036E0A7BD934014B4604695E53863A
SHA-256:	2CD254BF4EC68902C621D96C555ABF8BDD29E769E74A2A5BB28736B645B06A19
SHA-512:	5862AB5260699558722B1036E529C75B8BDB8D9BEC05D0111B3F2CEC30938506D6483F7CC2E4D7984687261577EBE8B52CEE2197CC818A92C5974B547A755375
Malicious:	false
Reputation:	low
URL:	https://www.goto.com/favicon.ico
Preview:	<HTML><HEAD>.<TITLE>Access Denied</TITLE>.</HEAD><BODY>.<H1>Access Denied</H1>. .You don't have permission to access "http://www.goto.com/favicon.ico" on this server.<P>.Reference #18.a6d01702.1728316942.10630c85.<P>https://errors.edgesuite.net/18.a6d01702.1728316942.10630c85</P>.</BODY>.</HTML>.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 18:02:04.118752956 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:04.118802071 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:04.118896961 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:04.119291067 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:04.119308949 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:04.800649881 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:04.800860882 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:04.807307959 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:04.807323933 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:04.807755947 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:04.819461107 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:04.867402077 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:04.920684099 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:04.920707941 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:04.920723915 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:04.920797110 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:04.920809031 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:04.920865059 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.232871056 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.232882977 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.232927084 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.232997894 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.233011961 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.233165026 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.233520985 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.233536005 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.233624935 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.233630896 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.233680010 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.240225077 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.240245104 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.240356922 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.240381956 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.240442038 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.241740942 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.241758108 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.241830111 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.241835117 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.241877079 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.243534088 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.243551016 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.243624926 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.243633986 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.243700981 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.245250940 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.245266914 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.245336056 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.245341063 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.245403051 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.246745110 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.246762991 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.246881008 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.246886969 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.246936083 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.248708963 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.248727083 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.248796940 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.248804092 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.248852015 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.250081062 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.250099897 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.250165939 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.250169992 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.250216961 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.318788052 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.318813086 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.318866968 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.318880081 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.318906069 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.318928003 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.319072008 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.319092989 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.319147110 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.319152117 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.319195986 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.319792986 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.319812059 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.319870949 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.319876909 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.319915056 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.319916964 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.319926977 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.319972992 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.319977045 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.320004940 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.320019007 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.320046902 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.320607901 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.320621967 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.320633888 CEST	49701	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.320638895 CEST	443	49701	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.362904072 CEST	49702	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.362932920 CEST	443	49702	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.363007069 CEST	49702	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.364144087 CEST	49703	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.364177942 CEST	443	49703	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.364227057 CEST	49703	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.364964962 CEST	49704	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.365034103 CEST	443	49704	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.365092993 CEST	49704	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.365164995 CEST	49702	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.365175962 CEST	443	49702	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.365273952 CEST	49703	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.365288973 CEST	443	49703	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.365581036 CEST	49704	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.365611076 CEST	443	49704	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.366858006 CEST	49705	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.366899014 CEST	443	49705	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.366965055 CEST	49705	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.367084026 CEST	49705	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.367096901 CEST	443	49705	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.368065119 CEST	49706	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.368077040 CEST	443	49706	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.368145943 CEST	49706	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.368282080 CEST	49706	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.368298054 CEST	443	49706	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.872055054 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 7, 2024 18:02:05.980921984 CEST	443	49705	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.981744051 CEST	49705	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.981760979 CEST	443	49705	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.982460976 CEST	49705	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.982465982 CEST	443	49705	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.986799002 CEST	443	49706	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.987278938 CEST	49706	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.987292051 CEST	443	49706	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.987879992 CEST	49706	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.987886906 CEST	443	49706	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.993679047 CEST	443	49703	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.993980885 CEST	49703	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.993993998 CEST	443	49703	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:05.994457960 CEST	49703	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:05.994466066 CEST	443	49703	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.011825085 CEST	443	49704	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.012182951 CEST	49704	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.012201071 CEST	443	49704	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.012780905 CEST	49704	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.012788057 CEST	443	49704	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.014236927 CEST	443	49702	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.014595985 CEST	49702	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.014616966 CEST	443	49702	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.015073061 CEST	49702	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.015078068 CEST	443	49702	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.074994087 CEST	443	49705	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.075052023 CEST	443	49705	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.075262070 CEST	49705	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.075288057 CEST	443	49705	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.075500965 CEST	49705	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.075509071 CEST	443	49705	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.075517893 CEST	49705	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.075612068 CEST	443	49705	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.075716019 CEST	443	49705	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.075767994 CEST	49705	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.079170942 CEST	49707	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.079207897 CEST	443	49707	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.079298973 CEST	49707	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.079471111 CEST	49707	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.079484940 CEST	443	49707	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.083704948 CEST	443	49706	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.083839893 CEST	443	49706	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.083904028 CEST	49706	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.083960056 CEST	49706	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.083976984 CEST	443	49706	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.083992958 CEST	49706	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.083998919 CEST	443	49706	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.086946964 CEST	49708	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.086985111 CEST	443	49708	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.087088108 CEST	49708	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.087259054 CEST	49708	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.087272882 CEST	443	49708	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.118700981 CEST	443	49703	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.118736029 CEST	443	49703	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.118803024 CEST	443	49703	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.118926048 CEST	49703	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.118926048 CEST	49703	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.119260073 CEST	49703	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.119273901 CEST	443	49703	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.119287014 CEST	49703	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.119292021 CEST	443	49703	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.121918917 CEST	443	49704	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.121984959 CEST	443	49704	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.122045994 CEST	49704	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.122196913 CEST	49704	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.122212887 CEST	443	49704	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.122229099 CEST	49704	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.122235060 CEST	443	49704	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.123228073 CEST	49709	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.123270988 CEST	443	49709	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.123358011 CEST	49709	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.123421907 CEST	443	49702	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.123444080 CEST	443	49702	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.123492956 CEST	443	49702	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.123517036 CEST	49702	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.123550892 CEST	49709	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.123563051 CEST	49702	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.123570919 CEST	443	49709	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.123734951 CEST	49702	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.123752117 CEST	443	49702	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.123760939 CEST	49702	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.123764992 CEST	443	49702	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.125094891 CEST	49710	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.125106096 CEST	443	49710	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.125181913 CEST	49710	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.125314951 CEST	49710	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.125330925 CEST	443	49710	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.126121044 CEST	49711	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.126152992 CEST	443	49711	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:06.126281023 CEST	49711	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.126343012 CEST	49711	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:06.126348972 CEST	443	49711	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.292475939 CEST	443	49709	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.293294907 CEST	49709	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.293324947 CEST	443	49709	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.293926954 CEST	49709	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.293931961 CEST	443	49709	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.354289055 CEST	443	49710	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.357141972 CEST	49710	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.357151985 CEST	443	49710	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.357589960 CEST	49710	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.357594967 CEST	443	49710	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.362508059 CEST	443	49708	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.363269091 CEST	49708	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.363281012 CEST	443	49708	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.363379002 CEST	49708	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.363393068 CEST	443	49708	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.366991043 CEST	443	49711	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.367405891 CEST	49711	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.367419004 CEST	443	49711	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.367810965 CEST	49711	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.367816925 CEST	443	49711	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.369266033 CEST	443	49707	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.369580030 CEST	49707	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.369602919 CEST	443	49707	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.370141983 CEST	49707	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.370146990 CEST	443	49707	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.394906998 CEST	443	49709	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.394978046 CEST	443	49709	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.395113945 CEST	49709	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.395283937 CEST	49709	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.395294905 CEST	443	49709	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.395303011 CEST	49709	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.395308018 CEST	443	49709	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.398053885 CEST	49712	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.398094893 CEST	443	49712	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.398169041 CEST	49712	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.398292065 CEST	49712	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.398303032 CEST	443	49712	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.450268984 CEST	443	49710	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.450347900 CEST	443	49710	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.450572014 CEST	49710	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.450601101 CEST	49710	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.450607061 CEST	443	49710	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.450629950 CEST	49710	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.450634003 CEST	443	49710	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.454286098 CEST	49713	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.454340935 CEST	443	49713	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.456377983 CEST	49713	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.456885099 CEST	49713	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.456902981 CEST	443	49713	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.459223032 CEST	443	49708	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.459412098 CEST	443	49708	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.459511995 CEST	49708	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.459511995 CEST	49708	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.459625959 CEST	49708	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.459640980 CEST	443	49708	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.461504936 CEST	443	49711	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.461980104 CEST	443	49711	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.462018013 CEST	49714	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.462033987 CEST	443	49714	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.462102890 CEST	49711	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.462129116 CEST	49714	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.462130070 CEST	49711	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.462137938 CEST	443	49711	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.462313890 CEST	49714	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.462332010 CEST	443	49714	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.462351084 CEST	49711	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.462357998 CEST	443	49711	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.464288950 CEST	49715	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.464320898 CEST	443	49715	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.464433908 CEST	49715	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.464518070 CEST	49715	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.464525938 CEST	443	49715	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.470944881 CEST	443	49707	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.471098900 CEST	443	49707	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.471249104 CEST	49707	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.471329927 CEST	49707	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.471376896 CEST	443	49707	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.471431017 CEST	49707	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.471447945 CEST	443	49707	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.475461006 CEST	49716	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.475492001 CEST	443	49716	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:07.475649118 CEST	49716	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.476140976 CEST	49716	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:07.476155043 CEST	443	49716	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.071846008 CEST	443	49712	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.121834993 CEST	49712	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.128690958 CEST	443	49713	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.130076885 CEST	443	49714	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.139750004 CEST	49712	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.139759064 CEST	443	49712	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.140738010 CEST	49712	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.140743971 CEST	443	49712	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.141258955 CEST	49713	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.141278982 CEST	443	49713	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.141963005 CEST	49713	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.141968966 CEST	443	49713	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.142400026 CEST	49714	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.142409086 CEST	443	49714	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.142973900 CEST	49714	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.142981052 CEST	443	49714	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.155354977 CEST	443	49716	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.155709028 CEST	49716	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.155725002 CEST	443	49716	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.159423113 CEST	49716	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.159430027 CEST	443	49716	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.162966013 CEST	443	49715	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.163351059 CEST	49715	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.163362980 CEST	443	49715	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.163887978 CEST	49715	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.163893938 CEST	443	49715	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.232753992 CEST	443	49712	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.232846022 CEST	443	49712	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.232911110 CEST	49712	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.233179092 CEST	49712	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.233202934 CEST	443	49712	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.234401941 CEST	443	49714	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.234510899 CEST	443	49714	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.235090971 CEST	49714	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.235090971 CEST	49714	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.235189915 CEST	49714	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.235212088 CEST	443	49714	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.238192081 CEST	49717	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.238255024 CEST	443	49717	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.238358974 CEST	49717	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.239286900 CEST	49718	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.239295006 CEST	443	49718	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.239411116 CEST	49718	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.240555048 CEST	443	49713	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.240607023 CEST	443	49713	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.240715981 CEST	49713	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.240732908 CEST	49717	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.240732908 CEST	49718	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.240751028 CEST	443	49717	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.240765095 CEST	443	49718	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.241020918 CEST	49713	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.241020918 CEST	49713	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.241035938 CEST	443	49713	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.241053104 CEST	443	49713	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.242924929 CEST	49719	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.242964983 CEST	443	49719	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.243097067 CEST	49719	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.243231058 CEST	49719	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.243247032 CEST	443	49719	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.251992941 CEST	443	49716	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.252141953 CEST	443	49716	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.252194881 CEST	49716	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.252255917 CEST	49716	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.252266884 CEST	443	49716	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.252281904 CEST	49716	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.252288103 CEST	443	49716	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.254642010 CEST	49720	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.254683018 CEST	443	49720	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.254793882 CEST	49720	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.254975080 CEST	49720	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.254992962 CEST	443	49720	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.262465000 CEST	443	49715	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.262614012 CEST	443	49715	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.262676001 CEST	49715	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.266953945 CEST	49715	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.266968012 CEST	443	49715	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.267005920 CEST	49715	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.267014027 CEST	443	49715	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.269009113 CEST	49721	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.269047976 CEST	443	49721	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.269167900 CEST	49721	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.269223928 CEST	49721	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.269232035 CEST	443	49721	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.872240067 CEST	443	49717	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.888684988 CEST	443	49720	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.893647909 CEST	443	49721	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.901288033 CEST	443	49718	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.918107033 CEST	443	49719	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:08.919423103 CEST	49717	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.934325933 CEST	49720	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.934346914 CEST	49721	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.950903893 CEST	49718	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:08.965714931 CEST	49719	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.039525986 CEST	49719	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.039578915 CEST	443	49719	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.040087938 CEST	49719	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.040096045 CEST	443	49719	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.040397882 CEST	49717	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.040429115 CEST	443	49717	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.040848017 CEST	49717	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.040858984 CEST	443	49717	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.041204929 CEST	49720	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.041232109 CEST	443	49720	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.041606903 CEST	49720	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.041615009 CEST	443	49720	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.041697979 CEST	49721	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.041714907 CEST	443	49721	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.042104006 CEST	49721	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.042119980 CEST	443	49721	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.042234898 CEST	49718	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.042260885 CEST	443	49718	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.042671919 CEST	49718	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.042682886 CEST	443	49718	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.134749889 CEST	443	49720	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.134828091 CEST	443	49720	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.134890079 CEST	49720	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.139110088 CEST	443	49719	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.139197111 CEST	443	49719	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.139302015 CEST	49719	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.140289068 CEST	443	49718	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.140501022 CEST	443	49718	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.140587091 CEST	49718	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.161978960 CEST	443	49721	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.162182093 CEST	443	49721	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.162241936 CEST	49721	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.171066999 CEST	443	49717	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.171468973 CEST	443	49717	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:10.171540976 CEST	49717	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:10.684405088 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 7, 2024 18:02:11.084351063 CEST	49720	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:11.084384918 CEST	443	49720	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:11.084400892 CEST	49720	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:11.084408998 CEST	443	49720	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:11.086302042 CEST	49717	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:11.086325884 CEST	443	49717	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:11.086345911 CEST	49717	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:11.086354971 CEST	443	49717	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:11.087553978 CEST	49719	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:11.087553978 CEST	49719	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:11.087596893 CEST	443	49719	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:11.087613106 CEST	443	49719	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:11.089335918 CEST	49718	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:11.089335918 CEST	49718	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:11.089354038 CEST	443	49718	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:11.089365005 CEST	443	49718	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:11.090862989 CEST	49721	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:11.090882063 CEST	443	49721	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:11.090892076 CEST	49721	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:11.090897083 CEST	443	49721	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:11.997153997 CEST	49722	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:11.997222900 CEST	443	49722	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:11.997294903 CEST	49722	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.000885963 CEST	49723	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.000940084 CEST	443	49723	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:12.001008987 CEST	49723	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.001652002 CEST	49722	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.001666069 CEST	443	49722	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:12.002695084 CEST	49724	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.002760887 CEST	443	49724	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:12.002820015 CEST	49724	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.003025055 CEST	49724	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.003046036 CEST	443	49724	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:12.003807068 CEST	49723	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.003827095 CEST	443	49723	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:12.004925013 CEST	49725	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.004971027 CEST	443	49725	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:12.005032063 CEST	49725	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.005259037 CEST	49725	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.005276918 CEST	443	49725	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:12.006457090 CEST	49726	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.006467104 CEST	443	49726	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:12.006537914 CEST	49726	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.006644964 CEST	49726	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:12.006654024 CEST	443	49726	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:12.059336901 CEST	49671	443	192.168.2.10	204.79.197.203
Oct 7, 2024 18:02:12.356178045 CEST	49674	443	192.168.2.10	173.222.162.55
Oct 7, 2024 18:02:12.356271982 CEST	49675	443	192.168.2.10	173.222.162.55
Oct 7, 2024 18:02:13.085782051 CEST	443	49723	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.098189116 CEST	443	49724	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.125370026 CEST	443	49722	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.125771046 CEST	443	49726	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.126003981 CEST	443	49725	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.137475967 CEST	49723	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.146892071 CEST	49725	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.146925926 CEST	443	49725	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.147412062 CEST	49725	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.147418022 CEST	443	49725	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.151151896 CEST	49723	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.151177883 CEST	443	49723	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.151576996 CEST	49723	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.151583910 CEST	443	49723	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.152570009 CEST	49724	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.152587891 CEST	443	49724	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.152920961 CEST	49724	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.152925968 CEST	443	49724	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.153475046 CEST	49722	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.153503895 CEST	443	49722	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.153867960 CEST	49722	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.153873920 CEST	443	49722	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.154129982 CEST	49726	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.154139042 CEST	443	49726	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.154508114 CEST	49726	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.154512882 CEST	443	49726	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.421837091 CEST	443	49725	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.421905994 CEST	443	49725	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.421972990 CEST	49725	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.422214031 CEST	49725	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.422271013 CEST	443	49725	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.422310114 CEST	49725	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.422327042 CEST	443	49725	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.425028086 CEST	49727	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.425113916 CEST	443	49727	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.425220013 CEST	49727	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.425405025 CEST	49727	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.425429106 CEST	443	49727	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.442759991 CEST	443	49722	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.442823887 CEST	443	49722	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.442879915 CEST	49722	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.443098068 CEST	49722	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.443115950 CEST	443	49722	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.443125963 CEST	49722	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.443131924 CEST	443	49722	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.447210073 CEST	49728	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.447247982 CEST	443	49728	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.447324991 CEST	49728	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.447495937 CEST	49728	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.447511911 CEST	443	49728	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.464629889 CEST	443	49723	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.464723110 CEST	443	49723	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.464792967 CEST	49723	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.473778963 CEST	443	49726	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.473855019 CEST	443	49726	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.473931074 CEST	49726	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.474973917 CEST	49723	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.474994898 CEST	443	49723	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.475006104 CEST	49723	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.475012064 CEST	443	49723	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.476135015 CEST	443	49724	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.476228952 CEST	443	49724	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.476284981 CEST	49724	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.480118990 CEST	49726	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.480118990 CEST	49726	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.480153084 CEST	443	49726	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.480176926 CEST	443	49726	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.494390965 CEST	49724	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.494404078 CEST	443	49724	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.494421959 CEST	49724	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.494426012 CEST	443	49724	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.507483006 CEST	49729	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.507528067 CEST	443	49729	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.507606983 CEST	49729	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.508559942 CEST	49729	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.508584976 CEST	443	49729	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.509242058 CEST	49730	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.509279966 CEST	443	49730	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.509341955 CEST	49730	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.509772062 CEST	49730	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.509783983 CEST	443	49730	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.511179924 CEST	49731	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.511205912 CEST	443	49731	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:13.511279106 CEST	49731	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.511507988 CEST	49731	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:13.511523962 CEST	443	49731	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:14.764416933 CEST	443	49727	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:14.765013933 CEST	49727	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:14.765078068 CEST	443	49727	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:14.765544891 CEST	49727	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:14.765549898 CEST	443	49727	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:14.888734102 CEST	443	49730	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:14.889611959 CEST	49730	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:14.889636993 CEST	443	49730	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:14.890089035 CEST	49730	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:14.890094995 CEST	443	49730	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:14.970794916 CEST	443	49728	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:14.971339941 CEST	49728	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:14.971370935 CEST	443	49728	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:14.972270012 CEST	49728	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:14.972278118 CEST	443	49728	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.084589958 CEST	443	49731	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.085170031 CEST	49731	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.085185051 CEST	443	49731	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.085758924 CEST	49731	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.085764885 CEST	443	49731	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.136528015 CEST	443	49729	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.137320995 CEST	49729	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.137340069 CEST	443	49729	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.137900114 CEST	49729	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.137904882 CEST	443	49729	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.193681955 CEST	443	49727	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.193752050 CEST	443	49727	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.193898916 CEST	49727	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.194190979 CEST	49727	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.194214106 CEST	443	49727	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.194227934 CEST	49727	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.194235086 CEST	443	49727	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.197724104 CEST	49735	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.197752953 CEST	443	49735	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.197848082 CEST	49735	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.198049068 CEST	49735	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.198065996 CEST	443	49735	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.325820923 CEST	443	49730	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.325875998 CEST	443	49730	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.326176882 CEST	49730	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.326425076 CEST	49730	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.326452971 CEST	443	49730	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.326467037 CEST	49730	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.326476097 CEST	443	49730	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.329428911 CEST	49736	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.329463005 CEST	443	49736	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.329566002 CEST	49736	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.329720020 CEST	49736	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.329726934 CEST	443	49736	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.396811008 CEST	443	49728	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.396892071 CEST	443	49728	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.396954060 CEST	49728	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.397211075 CEST	49728	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.397234917 CEST	443	49728	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.397248983 CEST	49728	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.397255898 CEST	443	49728	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.400579929 CEST	49737	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.400631905 CEST	443	49737	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.400710106 CEST	49737	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.400901079 CEST	49737	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.400919914 CEST	443	49737	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.447565079 CEST	443	49731	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.447652102 CEST	443	49731	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.447734118 CEST	49731	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.447983980 CEST	49731	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.447998047 CEST	443	49731	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.448010921 CEST	49731	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.448016882 CEST	443	49731	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.450927019 CEST	49738	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.450968981 CEST	443	49738	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.451097965 CEST	49738	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.451406002 CEST	49738	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.451423883 CEST	443	49738	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.475821972 CEST	443	49729	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.476000071 CEST	443	49729	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.476070881 CEST	49729	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.476120949 CEST	49729	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.476140976 CEST	443	49729	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.476154089 CEST	49729	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.476161003 CEST	443	49729	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.482180119 CEST	49739	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.482219934 CEST	443	49739	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.482290983 CEST	49739	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.482433081 CEST	49739	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.482445955 CEST	443	49739	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.967266083 CEST	443	49735	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.968733072 CEST	49735	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.968746901 CEST	443	49735	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.969260931 CEST	49735	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.969270945 CEST	443	49735	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.991518021 CEST	443	49736	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.992763996 CEST	49736	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.992779970 CEST	443	49736	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:15.993396997 CEST	49736	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:15.993402004 CEST	443	49736	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.053406954 CEST	443	49737	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.054049015 CEST	49737	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.054071903 CEST	443	49737	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.054826975 CEST	49737	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.054835081 CEST	443	49737	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.067452908 CEST	443	49735	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.067610979 CEST	443	49735	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.067687035 CEST	49735	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.067964077 CEST	49735	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.067981958 CEST	443	49735	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.067996025 CEST	49735	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.068001986 CEST	443	49735	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.070965052 CEST	49742	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.071008921 CEST	443	49742	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.071090937 CEST	49742	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.071254015 CEST	49742	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.071274996 CEST	443	49742	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.077164888 CEST	443	49738	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.077527046 CEST	49738	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.077545881 CEST	443	49738	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.077923059 CEST	49738	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.077929020 CEST	443	49738	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.127620935 CEST	443	49736	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.127681971 CEST	443	49736	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.127835989 CEST	49736	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.128034115 CEST	49736	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.128048897 CEST	443	49736	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.128057957 CEST	49736	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.128062010 CEST	443	49736	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.130872965 CEST	49743	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.130906105 CEST	443	49743	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.130991936 CEST	49743	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.131145000 CEST	49743	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.131156921 CEST	443	49743	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.151175022 CEST	443	49737	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.151261091 CEST	443	49737	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.151324034 CEST	49737	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.151527882 CEST	49737	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.151527882 CEST	49737	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.151541948 CEST	443	49737	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.151551962 CEST	443	49737	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.155582905 CEST	49744	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.155673027 CEST	443	49744	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.155790091 CEST	49744	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.155956030 CEST	49744	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.155983925 CEST	443	49744	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.178503036 CEST	443	49738	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.178641081 CEST	443	49738	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.178731918 CEST	49738	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.178936958 CEST	49738	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.178951025 CEST	443	49738	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.178986073 CEST	49738	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.178992033 CEST	443	49738	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.182236910 CEST	49745	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.182276011 CEST	443	49745	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.182368994 CEST	49745	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.182576895 CEST	49745	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.182591915 CEST	443	49745	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.304719925 CEST	49746	80	192.168.2.10	216.219.112.116
Oct 7, 2024 18:02:16.305126905 CEST	49747	80	192.168.2.10	216.219.112.116
Oct 7, 2024 18:02:16.309632063 CEST	80	49746	216.219.112.116	192.168.2.10
Oct 7, 2024 18:02:16.309710026 CEST	49746	80	192.168.2.10	216.219.112.116
Oct 7, 2024 18:02:16.309858084 CEST	49746	80	192.168.2.10	216.219.112.116
Oct 7, 2024 18:02:16.310041904 CEST	80	49747	216.219.112.116	192.168.2.10
Oct 7, 2024 18:02:16.310108900 CEST	49747	80	192.168.2.10	216.219.112.116
Oct 7, 2024 18:02:16.314634085 CEST	80	49746	216.219.112.116	192.168.2.10
Oct 7, 2024 18:02:16.917005062 CEST	443	49739	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.918828011 CEST	49739	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.918850899 CEST	443	49739	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:16.920051098 CEST	49739	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:16.920058966 CEST	443	49739	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.027101994 CEST	443	49739	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.027184010 CEST	443	49739	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.027239084 CEST	49739	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.029293060 CEST	49739	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.029320002 CEST	443	49739	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.043307066 CEST	49749	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.043348074 CEST	443	49749	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.043412924 CEST	49749	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.044028997 CEST	49749	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.044044018 CEST	443	49749	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.087204933 CEST	80	49746	216.219.112.116	192.168.2.10
Oct 7, 2024 18:02:17.132653952 CEST	443	49742	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.135940075 CEST	49746	80	192.168.2.10	216.219.112.116
Oct 7, 2024 18:02:17.161905050 CEST	49742	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.161922932 CEST	443	49742	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.165405989 CEST	49742	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.165415049 CEST	443	49742	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.172744989 CEST	49750	80	192.168.2.10	216.219.112.176
Oct 7, 2024 18:02:17.174319983 CEST	443	49743	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.175188065 CEST	49743	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.175203085 CEST	443	49743	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.176196098 CEST	49743	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.176198959 CEST	443	49743	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.178493023 CEST	80	49750	216.219.112.176	192.168.2.10
Oct 7, 2024 18:02:17.178559065 CEST	49750	80	192.168.2.10	216.219.112.176
Oct 7, 2024 18:02:17.178987980 CEST	49750	80	192.168.2.10	216.219.112.176
Oct 7, 2024 18:02:17.184174061 CEST	80	49750	216.219.112.176	192.168.2.10
Oct 7, 2024 18:02:17.212918997 CEST	443	49744	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.213742971 CEST	49744	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.213783979 CEST	443	49744	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.215444088 CEST	49744	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.215461016 CEST	443	49744	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.216762066 CEST	443	49745	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.217650890 CEST	49745	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.217688084 CEST	443	49745	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.219079971 CEST	49745	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.219103098 CEST	443	49745	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.309500933 CEST	443	49742	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.309668064 CEST	443	49742	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.309765100 CEST	49742	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.311191082 CEST	49742	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.311207056 CEST	443	49742	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.311216116 CEST	49742	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.311220884 CEST	443	49742	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.319776058 CEST	49751	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.319813013 CEST	443	49751	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.319891930 CEST	49751	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.322756052 CEST	49751	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.322784901 CEST	443	49751	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.386786938 CEST	443	49743	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.386857986 CEST	443	49743	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.386919975 CEST	49743	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.442362070 CEST	49743	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.442397118 CEST	443	49743	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.442428112 CEST	49743	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.442434072 CEST	443	49743	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.455372095 CEST	443	49744	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.455449104 CEST	443	49744	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.455744982 CEST	49744	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.457355976 CEST	49752	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.457391977 CEST	443	49752	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.457484961 CEST	49752	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.457685947 CEST	443	49745	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.457730055 CEST	49744	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.457751989 CEST	443	49744	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.457847118 CEST	443	49745	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.457895041 CEST	49745	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.459908962 CEST	49752	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.459928989 CEST	443	49752	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.460134029 CEST	49745	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.460167885 CEST	443	49745	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.460177898 CEST	49745	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.460186958 CEST	443	49745	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.464553118 CEST	49753	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.464579105 CEST	443	49753	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.464724064 CEST	49753	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.465523958 CEST	49754	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.465528965 CEST	443	49754	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.465576887 CEST	49754	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.465676069 CEST	49753	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.465687037 CEST	443	49753	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:17.465823889 CEST	49754	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:17.465831995 CEST	443	49754	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:18.565229893 CEST	80	49750	216.219.112.176	192.168.2.10
Oct 7, 2024 18:02:18.598866940 CEST	49756	443	192.168.2.10	216.58.206.68
Oct 7, 2024 18:02:18.598915100 CEST	443	49756	216.58.206.68	192.168.2.10
Oct 7, 2024 18:02:18.598988056 CEST	49756	443	192.168.2.10	216.58.206.68
Oct 7, 2024 18:02:18.599747896 CEST	49756	443	192.168.2.10	216.58.206.68
Oct 7, 2024 18:02:18.599766016 CEST	443	49756	216.58.206.68	192.168.2.10
Oct 7, 2024 18:02:18.604950905 CEST	49750	80	192.168.2.10	216.219.112.176
Oct 7, 2024 18:02:18.785511017 CEST	49750	80	192.168.2.10	216.219.112.176
Oct 7, 2024 18:02:18.790391922 CEST	80	49750	216.219.112.176	192.168.2.10
Oct 7, 2024 18:02:18.901515007 CEST	443	49749	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:18.948411942 CEST	49749	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:18.948460102 CEST	443	49749	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:18.949919939 CEST	49749	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:18.949928045 CEST	443	49749	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:18.964889050 CEST	80	49750	216.219.112.176	192.168.2.10
Oct 7, 2024 18:02:19.011053085 CEST	49750	80	192.168.2.10	216.219.112.176
Oct 7, 2024 18:02:19.065191984 CEST	443	49749	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.065362930 CEST	443	49749	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.065438986 CEST	49749	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.129255056 CEST	443	49753	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.146346092 CEST	443	49752	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.157164097 CEST	49749	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.157197952 CEST	443	49749	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.169428110 CEST	49753	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.190361023 CEST	49753	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.190396070 CEST	443	49753	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.191778898 CEST	49753	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.191783905 CEST	443	49753	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.197304964 CEST	49752	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.197341919 CEST	443	49752	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.199220896 CEST	49752	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.199229956 CEST	443	49752	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.226753950 CEST	49757	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.226800919 CEST	443	49757	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.226860046 CEST	49757	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.232258081 CEST	49757	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.232270956 CEST	443	49757	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.242762089 CEST	443	49751	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.243575096 CEST	49751	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.243593931 CEST	443	49751	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.244821072 CEST	49751	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.244826078 CEST	443	49751	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.286045074 CEST	443	49753	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.286108017 CEST	443	49753	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.286159039 CEST	49753	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.298962116 CEST	443	49752	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.299021959 CEST	443	49752	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.299069881 CEST	49752	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.331542015 CEST	443	49754	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.338198900 CEST	49753	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.338217974 CEST	443	49753	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.338231087 CEST	49753	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.338251114 CEST	443	49753	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.343894005 CEST	49752	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.343921900 CEST	443	49752	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.343940020 CEST	49752	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.343945980 CEST	443	49752	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.349431038 CEST	49754	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.349451065 CEST	443	49754	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.350264072 CEST	49754	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.350274086 CEST	443	49754	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.363496065 CEST	49759	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.363574028 CEST	443	49759	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.363691092 CEST	49759	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.365204096 CEST	49760	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.365231037 CEST	443	49760	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.366503954 CEST	49760	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.367141008 CEST	49760	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.367166042 CEST	443	49760	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.369348049 CEST	49759	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.369374037 CEST	443	49759	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.377429962 CEST	443	49751	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.377521038 CEST	443	49751	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.377635956 CEST	49751	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.377882004 CEST	49751	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.377882004 CEST	49751	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.377897978 CEST	443	49751	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.377907038 CEST	443	49751	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.394438982 CEST	49761	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.394480944 CEST	443	49761	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.394961119 CEST	49761	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.396353960 CEST	49761	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.396365881 CEST	443	49761	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.407203913 CEST	443	49756	216.58.206.68	192.168.2.10
Oct 7, 2024 18:02:19.408471107 CEST	49756	443	192.168.2.10	216.58.206.68
Oct 7, 2024 18:02:19.408493042 CEST	443	49756	216.58.206.68	192.168.2.10
Oct 7, 2024 18:02:19.409938097 CEST	443	49756	216.58.206.68	192.168.2.10
Oct 7, 2024 18:02:19.410404921 CEST	49756	443	192.168.2.10	216.58.206.68
Oct 7, 2024 18:02:19.412800074 CEST	49756	443	192.168.2.10	216.58.206.68
Oct 7, 2024 18:02:19.412894964 CEST	443	49756	216.58.206.68	192.168.2.10
Oct 7, 2024 18:02:19.454103947 CEST	49756	443	192.168.2.10	216.58.206.68
Oct 7, 2024 18:02:19.454122066 CEST	443	49756	216.58.206.68	192.168.2.10
Oct 7, 2024 18:02:19.462543011 CEST	443	49754	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.462711096 CEST	443	49754	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.462775946 CEST	49754	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.492415905 CEST	49754	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.492460012 CEST	443	49754	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.492472887 CEST	49754	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.492480993 CEST	443	49754	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.495232105 CEST	49756	443	192.168.2.10	216.58.206.68
Oct 7, 2024 18:02:19.505074978 CEST	49762	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.505131960 CEST	443	49762	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.505387068 CEST	49762	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.506639004 CEST	49762	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.506655931 CEST	443	49762	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.961656094 CEST	443	49757	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.962637901 CEST	49757	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.962639093 CEST	49757	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:19.962666035 CEST	443	49757	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:19.962678909 CEST	443	49757	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.061158895 CEST	443	49757	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.061229944 CEST	443	49757	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.061274052 CEST	49757	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.062741995 CEST	49757	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.062760115 CEST	443	49757	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.063402891 CEST	49757	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.063410044 CEST	443	49757	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.065794945 CEST	49763	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.065831900 CEST	443	49763	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.066067934 CEST	49763	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.066067934 CEST	49763	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.066102028 CEST	443	49763	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.137373924 CEST	443	49760	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.138036966 CEST	49760	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.138047934 CEST	443	49760	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.138628006 CEST	49760	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.138633966 CEST	443	49760	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.139261961 CEST	443	49759	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.139609098 CEST	49759	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.139621019 CEST	443	49759	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.142600060 CEST	443	49762	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.144489050 CEST	49759	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.144496918 CEST	443	49759	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.144958973 CEST	49762	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.144983053 CEST	443	49762	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.145587921 CEST	49762	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.145591974 CEST	443	49762	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.151804924 CEST	443	49761	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.152225971 CEST	49761	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.152235985 CEST	443	49761	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.152884960 CEST	49761	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.152890921 CEST	443	49761	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.203911066 CEST	49764	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:20.203943014 CEST	443	49764	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:20.205229044 CEST	49764	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:20.218497992 CEST	49764	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:20.218508959 CEST	443	49764	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:20.233791113 CEST	443	49760	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.233845949 CEST	443	49760	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.233930111 CEST	49760	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.234652042 CEST	49760	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.234652042 CEST	49760	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.234664917 CEST	443	49760	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.234704018 CEST	443	49760	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.237469912 CEST	443	49759	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.237523079 CEST	443	49759	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.237683058 CEST	49759	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.237976074 CEST	49759	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.237976074 CEST	49759	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.237983942 CEST	443	49759	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.237993956 CEST	443	49759	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.240005016 CEST	443	49762	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.240073919 CEST	443	49762	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.240144014 CEST	49762	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.240770102 CEST	49765	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.240787029 CEST	443	49765	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.240896940 CEST	49765	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.241044998 CEST	49765	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.241055965 CEST	443	49765	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.241554022 CEST	49762	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.241564989 CEST	443	49762	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.244087934 CEST	49766	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.244100094 CEST	443	49766	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.244568110 CEST	49766	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.244802952 CEST	49766	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.244812965 CEST	443	49766	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.248056889 CEST	49767	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.248066902 CEST	443	49767	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.248174906 CEST	49767	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.248627901 CEST	49767	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.248641014 CEST	443	49767	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.253403902 CEST	443	49761	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.253554106 CEST	443	49761	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.253678083 CEST	49761	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.253779888 CEST	49761	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.253779888 CEST	49761	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.253789902 CEST	443	49761	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.253797054 CEST	443	49761	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.256091118 CEST	49768	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.256130934 CEST	443	49768	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.256417036 CEST	49768	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.256656885 CEST	49768	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.256668091 CEST	443	49768	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.295152903 CEST	49677	443	192.168.2.10	20.42.65.85
Oct 7, 2024 18:02:20.689028978 CEST	443	49763	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.690226078 CEST	49763	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.690254927 CEST	443	49763	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.691550016 CEST	49763	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.691557884 CEST	443	49763	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.785871029 CEST	443	49763	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.786046028 CEST	443	49763	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.786135912 CEST	49763	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.816507101 CEST	49763	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.816529036 CEST	443	49763	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.816541910 CEST	49763	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.816548109 CEST	443	49763	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.820024967 CEST	443	49764	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:20.820097923 CEST	49764	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:20.859880924 CEST	443	49765	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.865134954 CEST	443	49766	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.880574942 CEST	443	49768	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.906989098 CEST	49765	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.906989098 CEST	49766	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.907365084 CEST	443	49767	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.922180891 CEST	49768	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.952055931 CEST	49767	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.970138073 CEST	49764	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:20.970153093 CEST	443	49764	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:20.970449924 CEST	443	49764	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:20.986582041 CEST	49766	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.986593962 CEST	443	49766	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.987894058 CEST	49766	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.987900019 CEST	443	49766	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.992280006 CEST	49765	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.992290020 CEST	443	49765	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:20.993295908 CEST	49765	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:20.993299961 CEST	443	49765	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.012037039 CEST	49764	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:21.021615028 CEST	49768	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.021631002 CEST	443	49768	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.022871017 CEST	49768	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.022893906 CEST	443	49768	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.031078100 CEST	49767	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.031100988 CEST	443	49767	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.032167912 CEST	49767	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.032180071 CEST	443	49767	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.087203979 CEST	443	49766	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.087315083 CEST	443	49766	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.087456942 CEST	49766	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.089744091 CEST	443	49765	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.089823008 CEST	443	49765	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.089869976 CEST	49765	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.131939888 CEST	443	49768	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.132023096 CEST	443	49768	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.132111073 CEST	49768	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.138262987 CEST	443	49767	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.138422966 CEST	443	49767	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.138484955 CEST	49767	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.182627916 CEST	49766	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.182648897 CEST	443	49766	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.182661057 CEST	49766	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.182667017 CEST	443	49766	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.217314005 CEST	49765	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.217331886 CEST	443	49765	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.217341900 CEST	49765	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.217346907 CEST	443	49765	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.239751101 CEST	49770	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.239787102 CEST	443	49770	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.239854097 CEST	49770	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.260313034 CEST	49768	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.260313034 CEST	49768	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.260365963 CEST	443	49768	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.260379076 CEST	443	49768	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.268208981 CEST	49767	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.268240929 CEST	443	49767	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.268258095 CEST	49767	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.268266916 CEST	443	49767	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.330826044 CEST	49764	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:21.362811089 CEST	49770	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.362840891 CEST	443	49770	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.375410080 CEST	443	49764	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:21.400895119 CEST	49771	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.400945902 CEST	443	49771	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.401245117 CEST	49771	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.402590990 CEST	49772	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.402641058 CEST	443	49772	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.402704954 CEST	49772	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.407584906 CEST	49771	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.407604933 CEST	443	49771	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.408948898 CEST	49773	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.408996105 CEST	443	49773	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.409066916 CEST	49773	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.409197092 CEST	49773	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.409205914 CEST	443	49773	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.409332991 CEST	49772	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.409351110 CEST	443	49772	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.410978079 CEST	49774	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.410986900 CEST	443	49774	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.411134005 CEST	49774	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.411679029 CEST	49774	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:21.411693096 CEST	443	49774	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:21.555649042 CEST	443	49764	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:21.555732012 CEST	443	49764	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:21.555798054 CEST	49764	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:21.556317091 CEST	49764	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:21.556339979 CEST	443	49764	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:21.556351900 CEST	49764	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:21.556358099 CEST	443	49764	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:21.598521948 CEST	49775	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:21.598552942 CEST	443	49775	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:21.598661900 CEST	49775	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:21.599173069 CEST	49775	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:21.599189043 CEST	443	49775	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:22.032840967 CEST	443	49770	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.038645029 CEST	443	49772	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.049930096 CEST	443	49774	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.057142973 CEST	443	49773	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.076085091 CEST	49770	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.081418037 CEST	443	49771	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.092099905 CEST	49772	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.092884064 CEST	49774	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.108083963 CEST	49773	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.136857033 CEST	49771	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.181220055 CEST	49774	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.181235075 CEST	443	49774	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.181427002 CEST	49771	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.181446075 CEST	443	49771	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.181516886 CEST	49772	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.181575060 CEST	443	49772	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.181787968 CEST	49774	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.181798935 CEST	443	49774	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.181904078 CEST	49772	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.181922913 CEST	443	49772	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.182298899 CEST	49771	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.182306051 CEST	443	49771	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.182569027 CEST	49770	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.182574034 CEST	443	49770	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.182621956 CEST	49773	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.182631016 CEST	443	49773	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.184102058 CEST	49773	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.184112072 CEST	443	49773	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.184142113 CEST	49770	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.184145927 CEST	443	49770	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.208805084 CEST	443	49775	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:22.208947897 CEST	49775	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:22.256052971 CEST	49775	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:22.256067991 CEST	443	49775	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:22.256378889 CEST	443	49775	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:22.257864952 CEST	49775	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:22.273000002 CEST	443	49772	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.273072958 CEST	443	49772	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.273159027 CEST	49772	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.273650885 CEST	49772	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.273705006 CEST	443	49772	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.273739100 CEST	49772	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.273756027 CEST	443	49772	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.274210930 CEST	443	49774	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.274385929 CEST	443	49774	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.274458885 CEST	49774	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.275218010 CEST	49774	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.275229931 CEST	443	49774	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.275947094 CEST	443	49770	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.276012897 CEST	443	49770	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.276091099 CEST	49770	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.277056932 CEST	443	49773	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.277432919 CEST	49770	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.277439117 CEST	443	49770	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.277470112 CEST	49770	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.277475119 CEST	443	49770	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.277815104 CEST	443	49773	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.277867079 CEST	49773	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.278603077 CEST	49773	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.278610945 CEST	443	49773	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.278621912 CEST	49773	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.278625965 CEST	443	49773	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.279448986 CEST	443	49771	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.279512882 CEST	443	49771	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.279654980 CEST	49771	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.280420065 CEST	49771	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.280420065 CEST	49771	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.280456066 CEST	443	49771	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.280462027 CEST	443	49771	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.283098936 CEST	49778	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.283108950 CEST	443	49778	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.283613920 CEST	49778	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.284471989 CEST	49779	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.284514904 CEST	443	49779	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.284585953 CEST	49779	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.284904003 CEST	49778	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.284914970 CEST	443	49778	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.285626888 CEST	49780	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.285650969 CEST	443	49780	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.286004066 CEST	49780	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.286031961 CEST	49780	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.286037922 CEST	443	49780	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.286149025 CEST	49779	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.286164045 CEST	443	49779	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.289495945 CEST	49781	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.289521933 CEST	443	49781	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.289802074 CEST	49781	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.290060043 CEST	49781	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.290075064 CEST	443	49781	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.290617943 CEST	49782	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.290625095 CEST	443	49782	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.290971994 CEST	49782	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.290971994 CEST	49782	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.290990114 CEST	443	49782	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.299412012 CEST	443	49775	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:22.466579914 CEST	443	49775	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:22.466654062 CEST	443	49775	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:22.466720104 CEST	49775	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:22.475497961 CEST	49775	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:22.475523949 CEST	443	49775	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:22.475541115 CEST	49775	443	192.168.2.10	184.28.90.27
Oct 7, 2024 18:02:22.475548983 CEST	443	49775	184.28.90.27	192.168.2.10
Oct 7, 2024 18:02:22.906728029 CEST	443	49781	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.907227993 CEST	443	49779	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.934412003 CEST	443	49778	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.937854052 CEST	443	49782	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:22.950228930 CEST	49781	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.950238943 CEST	49779	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.981457949 CEST	49778	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:22.981581926 CEST	49782	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.047733068 CEST	49781	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.047744989 CEST	443	49781	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.048254967 CEST	49781	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.048259974 CEST	443	49781	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.048573017 CEST	49779	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.048588037 CEST	443	49779	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.048990965 CEST	49779	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.048995018 CEST	443	49779	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.049254894 CEST	49778	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.049264908 CEST	443	49778	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.049617052 CEST	49778	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.049622059 CEST	443	49778	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.049961090 CEST	49782	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.049964905 CEST	443	49782	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.050400972 CEST	49782	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.050405979 CEST	443	49782	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.140455961 CEST	443	49781	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.140852928 CEST	443	49781	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.140904903 CEST	49781	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.141911983 CEST	443	49779	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.141978979 CEST	443	49779	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.142019987 CEST	49779	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.143163919 CEST	49781	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.143178940 CEST	443	49781	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.143193007 CEST	49781	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.143198013 CEST	443	49781	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.145253897 CEST	49779	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.145275116 CEST	443	49779	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.145287037 CEST	49779	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.145293951 CEST	443	49779	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.146466017 CEST	443	49778	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.146531105 CEST	443	49778	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.146567106 CEST	49778	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.147861958 CEST	49778	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.147871971 CEST	443	49778	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.147885084 CEST	49778	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.147890091 CEST	443	49778	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.151981115 CEST	49784	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.152033091 CEST	443	49784	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.152105093 CEST	49784	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.153343916 CEST	49785	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.153368950 CEST	443	49785	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.153422117 CEST	49785	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.153800011 CEST	49784	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.153830051 CEST	443	49784	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.153867960 CEST	49785	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.153879881 CEST	443	49785	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.154788017 CEST	49786	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.154797077 CEST	443	49786	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.154851913 CEST	49786	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.154983044 CEST	49786	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.154990911 CEST	443	49786	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.162425041 CEST	443	49782	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.162478924 CEST	443	49782	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.162513971 CEST	49782	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.162625074 CEST	49782	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.162628889 CEST	443	49782	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.162648916 CEST	49782	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.162652969 CEST	443	49782	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.164664984 CEST	49787	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.164705992 CEST	443	49787	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.164782047 CEST	49787	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.164891005 CEST	49787	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.164908886 CEST	443	49787	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.572789907 CEST	443	49780	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.573383093 CEST	49780	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.573402882 CEST	443	49780	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.573980093 CEST	49780	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.573986053 CEST	443	49780	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.671809912 CEST	443	49780	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.671876907 CEST	443	49780	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.671932936 CEST	49780	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.672132015 CEST	49780	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.672148943 CEST	443	49780	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.672159910 CEST	49780	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.672164917 CEST	443	49780	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.676121950 CEST	49789	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.676167965 CEST	443	49789	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.676233053 CEST	49789	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.676542997 CEST	49789	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.676558018 CEST	443	49789	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.769268990 CEST	443	49784	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.769993067 CEST	49784	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.770030022 CEST	443	49784	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.770869970 CEST	49784	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.770929098 CEST	443	49784	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.774631977 CEST	443	49786	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.775566101 CEST	49786	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.775649071 CEST	443	49786	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.776154995 CEST	443	49787	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.776205063 CEST	49786	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.776220083 CEST	443	49786	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.776647091 CEST	49787	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.776683092 CEST	443	49787	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.777065039 CEST	49787	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.777072906 CEST	443	49787	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.796391964 CEST	443	49785	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.797702074 CEST	49785	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.797785044 CEST	443	49785	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.798784018 CEST	49785	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.798799992 CEST	443	49785	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.867728949 CEST	443	49784	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.867805004 CEST	443	49784	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.867862940 CEST	49784	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.868195057 CEST	49784	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.868215084 CEST	443	49784	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.868227005 CEST	49784	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.868232965 CEST	443	49784	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.869038105 CEST	443	49786	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.869112015 CEST	443	49786	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.869170904 CEST	49786	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.869499922 CEST	49786	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.869499922 CEST	49786	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.869544029 CEST	443	49786	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.869569063 CEST	443	49786	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.871860981 CEST	49790	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.871901035 CEST	443	49790	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.871963024 CEST	49790	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.872420073 CEST	49790	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.872432947 CEST	443	49790	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.873048067 CEST	443	49787	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.873157024 CEST	49791	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.873198032 CEST	443	49791	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.873198986 CEST	443	49787	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.873249054 CEST	49787	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.873275042 CEST	49791	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.873292923 CEST	49787	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.873297930 CEST	443	49787	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.873322964 CEST	49787	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.873327017 CEST	443	49787	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.873476028 CEST	49791	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.873497009 CEST	443	49791	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.875489950 CEST	49792	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.875524998 CEST	443	49792	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.875588894 CEST	49792	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.875803947 CEST	49792	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.875818968 CEST	443	49792	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.896610975 CEST	443	49785	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.896779060 CEST	443	49785	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.896847963 CEST	49785	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.898143053 CEST	49785	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.898164034 CEST	443	49785	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.898189068 CEST	49785	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.898205042 CEST	443	49785	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.906250954 CEST	49793	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.906313896 CEST	443	49793	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:23.906385899 CEST	49793	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.906770945 CEST	49793	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:23.906789064 CEST	443	49793	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.298341990 CEST	443	49789	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.304975986 CEST	49789	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.305001974 CEST	443	49789	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.308104992 CEST	49789	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.308118105 CEST	443	49789	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.399441004 CEST	443	49789	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.399523020 CEST	443	49789	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.399812937 CEST	49789	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.399877071 CEST	49789	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.399877071 CEST	49789	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.399899006 CEST	443	49789	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.399910927 CEST	443	49789	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.403410912 CEST	49795	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.403439999 CEST	443	49795	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.404248953 CEST	49795	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.404284000 CEST	49795	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.404292107 CEST	443	49795	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.483097076 CEST	443	49791	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.483763933 CEST	49791	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.483788967 CEST	443	49791	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.485613108 CEST	49791	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.485621929 CEST	443	49791	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.499309063 CEST	443	49790	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.500355959 CEST	49790	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.500355959 CEST	49790	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.500389099 CEST	443	49790	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.500403881 CEST	443	49790	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.501580954 CEST	443	49792	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.502249002 CEST	49792	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.502258062 CEST	443	49792	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.502490044 CEST	49792	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.502501965 CEST	443	49792	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.522780895 CEST	443	49793	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.523819923 CEST	49793	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.523819923 CEST	49793	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.523838997 CEST	443	49793	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.523857117 CEST	443	49793	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.592307091 CEST	443	49791	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.592478991 CEST	443	49791	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.592581034 CEST	49791	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.593147993 CEST	49791	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.593147993 CEST	49791	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.593183041 CEST	443	49791	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.593189955 CEST	443	49791	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.595822096 CEST	443	49790	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.596009016 CEST	443	49790	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.596504927 CEST	49796	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.596561909 CEST	443	49796	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.596568108 CEST	49790	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.596673965 CEST	49796	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.596704006 CEST	49790	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.596738100 CEST	443	49790	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.596843004 CEST	49790	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.596849918 CEST	443	49790	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.596995115 CEST	49796	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.597016096 CEST	443	49796	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.598992109 CEST	49797	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.599035978 CEST	443	49797	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.599239111 CEST	49797	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.599392891 CEST	49797	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.599404097 CEST	443	49797	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.605220079 CEST	443	49792	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.605350971 CEST	443	49792	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.605506897 CEST	49792	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.605540991 CEST	49792	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.605540991 CEST	49792	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.605556965 CEST	443	49792	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.605566025 CEST	443	49792	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.609395981 CEST	49798	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.609406948 CEST	443	49798	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.609596014 CEST	49798	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.609807014 CEST	49798	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.609817028 CEST	443	49798	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.620306015 CEST	443	49793	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.620377064 CEST	443	49793	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.620459080 CEST	49793	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.620652914 CEST	49793	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.620671988 CEST	443	49793	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.620692968 CEST	49793	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.620708942 CEST	443	49793	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.626028061 CEST	49799	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.626085043 CEST	443	49799	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:24.627656937 CEST	49799	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.627896070 CEST	49799	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:24.627918959 CEST	443	49799	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.137639999 CEST	443	49795	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.139161110 CEST	49795	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.139161110 CEST	49795	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.139173985 CEST	443	49795	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.139189005 CEST	443	49795	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.233299017 CEST	443	49795	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.233452082 CEST	443	49795	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.233834982 CEST	49795	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.233834982 CEST	49795	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.234000921 CEST	49795	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.234013081 CEST	443	49795	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.237579107 CEST	49800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.237632990 CEST	443	49800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.237886906 CEST	49800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.237886906 CEST	49800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.237929106 CEST	443	49800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.304863930 CEST	443	49797	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.305792093 CEST	49797	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.305833101 CEST	443	49797	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.308854103 CEST	49797	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.308875084 CEST	443	49797	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.314407110 CEST	443	49798	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.315154076 CEST	49798	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.315184116 CEST	443	49798	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.315742016 CEST	49798	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.315752029 CEST	443	49798	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.317207098 CEST	443	49796	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.322094917 CEST	49796	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.322139978 CEST	443	49796	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.322647095 CEST	49796	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.322654009 CEST	443	49796	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.338623047 CEST	443	49799	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.339266062 CEST	49799	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.339277029 CEST	443	49799	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.339919090 CEST	49799	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.339926958 CEST	443	49799	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.404779911 CEST	443	49797	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.404824972 CEST	443	49797	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.404892921 CEST	49797	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.404922009 CEST	443	49797	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.405093908 CEST	443	49797	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.405136108 CEST	49797	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.405296087 CEST	49797	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.405316114 CEST	443	49797	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.405342102 CEST	49797	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.405353069 CEST	443	49797	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.409408092 CEST	49801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.409457922 CEST	443	49801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.409524918 CEST	49801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.409826040 CEST	49801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.409840107 CEST	443	49801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.412206888 CEST	443	49798	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.412278891 CEST	443	49798	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.412318945 CEST	49798	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.412460089 CEST	49798	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.412473917 CEST	443	49798	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.412497044 CEST	49798	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.412502050 CEST	443	49798	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.415266991 CEST	49802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.415288925 CEST	443	49802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.415347099 CEST	49802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.415489912 CEST	49802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.415502071 CEST	443	49802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.439568043 CEST	443	49799	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.439652920 CEST	443	49799	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.439706087 CEST	49799	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.440052986 CEST	49799	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.440077066 CEST	443	49799	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.440092087 CEST	49799	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.440099001 CEST	443	49799	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.443844080 CEST	49803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.443877935 CEST	443	49803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.443942070 CEST	49803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.444073915 CEST	49803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.444080114 CEST	443	49803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.450368881 CEST	443	49796	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.450427055 CEST	443	49796	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.450465918 CEST	49796	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.450622082 CEST	49796	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.450630903 CEST	443	49796	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.450645924 CEST	49796	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.450650930 CEST	443	49796	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.454114914 CEST	49804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.454149961 CEST	443	49804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.454211950 CEST	49804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.454370022 CEST	49804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.454379082 CEST	443	49804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.879374981 CEST	443	49800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.880121946 CEST	49800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.880140066 CEST	443	49800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.880585909 CEST	49800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.880594015 CEST	443	49800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.977616072 CEST	443	49800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.977637053 CEST	443	49800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.977699995 CEST	49800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.977720022 CEST	443	49800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.977885008 CEST	443	49800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.977929115 CEST	49800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.978050947 CEST	49800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.978070974 CEST	443	49800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.978080988 CEST	49800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.978085995 CEST	443	49800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.982785940 CEST	49805	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.982815981 CEST	443	49805	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:25.982889891 CEST	49805	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.983084917 CEST	49805	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:25.983098030 CEST	443	49805	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.015980959 CEST	443	49801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.016616106 CEST	49801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.016633034 CEST	443	49801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.017333031 CEST	49801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.017338037 CEST	443	49801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.020927906 CEST	443	49802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.021351099 CEST	49802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.021370888 CEST	443	49802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.022017002 CEST	49802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.022022963 CEST	443	49802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.068773985 CEST	443	49804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.069430113 CEST	49804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.069458008 CEST	443	49804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.070132971 CEST	49804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.070139885 CEST	443	49804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.076505899 CEST	443	49803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.077042103 CEST	49803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.077061892 CEST	443	49803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.077630997 CEST	49803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.077636003 CEST	443	49803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.123661041 CEST	443	49801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.123686075 CEST	443	49801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.123740911 CEST	443	49801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.123749018 CEST	49801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.123797894 CEST	49801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.124119997 CEST	49801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.124133110 CEST	443	49801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.124156952 CEST	49801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.124161959 CEST	443	49801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.124485970 CEST	443	49802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.124532938 CEST	443	49802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.124577045 CEST	49802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.124587059 CEST	443	49802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.124650955 CEST	443	49802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.124694109 CEST	49802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.124911070 CEST	49802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.124917030 CEST	443	49802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.124926090 CEST	49802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.124928951 CEST	443	49802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.129225969 CEST	49806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.129256964 CEST	443	49806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.129307985 CEST	49807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.129331112 CEST	49806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.129405022 CEST	443	49807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.129462957 CEST	49807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.129565954 CEST	49806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.129580021 CEST	443	49806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.129734039 CEST	49807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.129767895 CEST	443	49807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.163983107 CEST	443	49804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.164596081 CEST	443	49804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.164679050 CEST	49804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.164735079 CEST	49804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.164735079 CEST	49804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.164763927 CEST	443	49804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.164784908 CEST	443	49804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.169116020 CEST	49808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.169168949 CEST	443	49808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.169235945 CEST	49808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.169403076 CEST	49808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.169416904 CEST	443	49808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.175538063 CEST	443	49803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.176012993 CEST	443	49803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.176062107 CEST	49803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.176124096 CEST	49803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.176141977 CEST	443	49803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.176158905 CEST	49803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.176165104 CEST	443	49803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.179734945 CEST	49809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.179789066 CEST	443	49809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.179866076 CEST	49809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.180037022 CEST	49809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.180057049 CEST	443	49809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.594621897 CEST	443	49805	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.595839024 CEST	49805	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.595863104 CEST	443	49805	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.596851110 CEST	49805	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.596856117 CEST	443	49805	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.694541931 CEST	443	49805	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.694962978 CEST	443	49805	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.696898937 CEST	49805	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.703553915 CEST	49805	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.703578949 CEST	443	49805	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.707698107 CEST	49810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.707747936 CEST	443	49810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.707844019 CEST	49810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.708061934 CEST	49810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.708070993 CEST	443	49810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.754951000 CEST	443	49806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.755943060 CEST	49806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.755961895 CEST	443	49806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.757281065 CEST	49806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.757288933 CEST	443	49806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.782222033 CEST	443	49807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.783319950 CEST	49807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.783421040 CEST	443	49807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.784030914 CEST	49807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.784049988 CEST	443	49807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.792948008 CEST	443	49808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.794244051 CEST	49808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.794260025 CEST	443	49808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.795341015 CEST	49808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.795346022 CEST	443	49808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.816045046 CEST	443	49809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.817562103 CEST	49809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.817591906 CEST	443	49809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.818685055 CEST	49809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.818691015 CEST	443	49809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.852055073 CEST	443	49806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.852195978 CEST	443	49806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.852250099 CEST	49806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.853101969 CEST	49806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.853122950 CEST	443	49806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.853137016 CEST	49806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.853142977 CEST	443	49806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.858963966 CEST	49811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.858994961 CEST	443	49811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.859082937 CEST	49811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.859834909 CEST	49811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.859849930 CEST	443	49811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.882671118 CEST	443	49807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.883183002 CEST	443	49807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.883253098 CEST	49807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.883336067 CEST	49807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.883361101 CEST	443	49807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.883373976 CEST	49807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.883380890 CEST	443	49807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.887469053 CEST	49812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.887511015 CEST	443	49812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.887804031 CEST	49812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.887963057 CEST	49812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.887983084 CEST	443	49812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.889666080 CEST	443	49808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.889823914 CEST	443	49808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.889892101 CEST	49808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.890431881 CEST	49808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.890441895 CEST	443	49808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.890472889 CEST	49808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.890480995 CEST	443	49808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.894587994 CEST	49813	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.894619942 CEST	443	49813	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.894741058 CEST	49813	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.894953966 CEST	49813	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.894968033 CEST	443	49813	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.920154095 CEST	443	49809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.920752048 CEST	443	49809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.920829058 CEST	49809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.921106100 CEST	49809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.921127081 CEST	443	49809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.921138048 CEST	49809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.921144009 CEST	443	49809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.925896883 CEST	49814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.925909996 CEST	443	49814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:26.925982952 CEST	49814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.926471949 CEST	49814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:26.926485062 CEST	443	49814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.316320896 CEST	443	49810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.317291975 CEST	49810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.317322969 CEST	443	49810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.318586111 CEST	49810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.318591118 CEST	443	49810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.412069082 CEST	443	49810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.412731886 CEST	443	49810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.412815094 CEST	49810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.412925005 CEST	49810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.412949085 CEST	443	49810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.412981987 CEST	49810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.412987947 CEST	443	49810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.419784069 CEST	49815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.419828892 CEST	443	49815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.420183897 CEST	49815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.420640945 CEST	49815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.420665026 CEST	443	49815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.494801998 CEST	443	49811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.496293068 CEST	49811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.496315956 CEST	443	49811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.497196913 CEST	49811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.497201920 CEST	443	49811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.504369974 CEST	443	49813	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.504890919 CEST	49813	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.504909992 CEST	443	49813	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.505312920 CEST	49813	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.505316973 CEST	443	49813	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.532062054 CEST	443	49812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.533202887 CEST	49812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.533222914 CEST	443	49812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.533246994 CEST	49812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.533252001 CEST	443	49812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.573506117 CEST	443	49814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.574206114 CEST	49814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.574227095 CEST	443	49814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.574743032 CEST	49814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.574747086 CEST	443	49814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.615206003 CEST	443	49811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.615281105 CEST	443	49811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.615340948 CEST	49811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.615644932 CEST	49811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.615669012 CEST	443	49811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.615698099 CEST	49811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.615704060 CEST	443	49811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.619208097 CEST	49816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.619246960 CEST	443	49816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.619369984 CEST	49816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.619555950 CEST	49816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.619566917 CEST	443	49816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.640239954 CEST	443	49812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.640403986 CEST	443	49812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.640647888 CEST	49812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.640647888 CEST	49812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.640647888 CEST	49812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.643709898 CEST	49817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.643754959 CEST	443	49817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.643826008 CEST	49817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.643982887 CEST	49817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.643996000 CEST	443	49817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.668085098 CEST	443	49813	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.668114901 CEST	443	49813	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.668169022 CEST	443	49813	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.668181896 CEST	49813	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.668227911 CEST	49813	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.668406963 CEST	49813	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.668428898 CEST	49813	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.668457031 CEST	443	49813	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.668471098 CEST	443	49813	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.671818972 CEST	49818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.671835899 CEST	443	49818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.671910048 CEST	49818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.672126055 CEST	49818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.672136068 CEST	443	49818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.680706024 CEST	443	49814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.680862904 CEST	443	49814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.680922031 CEST	49814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.680994987 CEST	49814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.681000948 CEST	443	49814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.681013107 CEST	49814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.681018114 CEST	443	49814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.684165955 CEST	49819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.684192896 CEST	443	49819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.684303999 CEST	49819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.684442043 CEST	49819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.684454918 CEST	443	49819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:27.947422028 CEST	49812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:27.947449923 CEST	443	49812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.125143051 CEST	443	49815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.127410889 CEST	49815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.127410889 CEST	49815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.127444983 CEST	443	49815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.127458096 CEST	443	49815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.324184895 CEST	443	49815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.324213028 CEST	443	49815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.324256897 CEST	443	49815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.324399948 CEST	49815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.324399948 CEST	49815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.324857950 CEST	49815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.324886084 CEST	443	49815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.324896097 CEST	49815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.324902058 CEST	443	49815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.333242893 CEST	49820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.333280087 CEST	443	49820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.333535910 CEST	49820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.333810091 CEST	49820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.333826065 CEST	443	49820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.442945004 CEST	443	49816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.444164991 CEST	49816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.444189072 CEST	443	49816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.445204020 CEST	443	49817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.445807934 CEST	49816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.445815086 CEST	443	49816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.446835995 CEST	49817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.446863890 CEST	443	49817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.448129892 CEST	49817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.448137999 CEST	443	49817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.491139889 CEST	443	49819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.491782904 CEST	49819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.491802931 CEST	443	49819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.493444920 CEST	49819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.493453026 CEST	443	49819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.510234118 CEST	443	49818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.511369944 CEST	49818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.511449099 CEST	443	49818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.512193918 CEST	49818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.512209892 CEST	443	49818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.541667938 CEST	443	49816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.542131901 CEST	443	49816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.542200089 CEST	49816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.542469025 CEST	49816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.542484045 CEST	443	49816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.542499065 CEST	49816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.542505026 CEST	443	49816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.543126106 CEST	443	49817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.543284893 CEST	443	49817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.543348074 CEST	49817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.547682047 CEST	49817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.547722101 CEST	443	49817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.547750950 CEST	49817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.547765017 CEST	443	49817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.555130959 CEST	49821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.555181026 CEST	443	49821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.555248022 CEST	49821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.556835890 CEST	49821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.556849003 CEST	443	49821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.560112000 CEST	49822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.560125113 CEST	443	49822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.560187101 CEST	49822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.560560942 CEST	49822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.560570002 CEST	443	49822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.590491056 CEST	443	49819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.590523005 CEST	443	49819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.590564013 CEST	443	49819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.590573072 CEST	49819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.590607882 CEST	49819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.591202974 CEST	49819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.591213942 CEST	443	49819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.599251032 CEST	49823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.599288940 CEST	443	49823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.599356890 CEST	49823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.599850893 CEST	49823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.599865913 CEST	443	49823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.617486000 CEST	443	49818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.618635893 CEST	443	49818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.618707895 CEST	49818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.618988037 CEST	49818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.619015932 CEST	443	49818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.619040966 CEST	49818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.619055033 CEST	443	49818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.627876043 CEST	49824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.627909899 CEST	443	49824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:28.627966881 CEST	49824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.628427029 CEST	49824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:28.628438950 CEST	443	49824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.252684116 CEST	443	49820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.253431082 CEST	49820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.253456116 CEST	443	49820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.253999949 CEST	49820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.254004955 CEST	443	49820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.257337093 CEST	443	49821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.257863045 CEST	49821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.257877111 CEST	443	49821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.258317947 CEST	49821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.258322954 CEST	443	49821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.260515928 CEST	443	49823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.260878086 CEST	49823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.260904074 CEST	443	49823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.261379004 CEST	49823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.261385918 CEST	443	49823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.265105963 CEST	443	49822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.265427113 CEST	49822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.265434980 CEST	443	49822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.265949011 CEST	49822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.265954018 CEST	443	49822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.293308020 CEST	443	49756	216.58.206.68	192.168.2.10
Oct 7, 2024 18:02:29.293365002 CEST	443	49756	216.58.206.68	192.168.2.10
Oct 7, 2024 18:02:29.293405056 CEST	49756	443	192.168.2.10	216.58.206.68
Oct 7, 2024 18:02:29.348531961 CEST	443	49820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.348990917 CEST	443	49820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.349062920 CEST	49820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.349116087 CEST	49820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.349116087 CEST	49820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.349138975 CEST	443	49820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.349149942 CEST	443	49820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.352334976 CEST	49825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.352382898 CEST	443	49825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.352453947 CEST	49825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.352648973 CEST	49825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.352672100 CEST	443	49825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.352971077 CEST	443	49821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.353216887 CEST	443	49821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.353337049 CEST	49821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.353337049 CEST	49821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.353368998 CEST	49821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.353375912 CEST	443	49821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.355907917 CEST	49826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.355917931 CEST	443	49826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.355993986 CEST	49826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.356136084 CEST	49826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.356149912 CEST	443	49826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.366751909 CEST	443	49822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.366877079 CEST	443	49822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.367033005 CEST	49822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.367033005 CEST	49822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.367050886 CEST	49822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.367057085 CEST	443	49822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.369642973 CEST	49827	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.369678974 CEST	443	49827	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.369766951 CEST	49827	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.369909048 CEST	49827	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.369925976 CEST	443	49827	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.378252983 CEST	443	49823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.378312111 CEST	443	49823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.378422022 CEST	443	49823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.378551006 CEST	49823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.378551006 CEST	49823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.378585100 CEST	49823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.378597021 CEST	443	49823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.378607988 CEST	49823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.378612995 CEST	443	49823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.381067991 CEST	49828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.381098032 CEST	443	49828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.381299019 CEST	49828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.381299019 CEST	49828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.381326914 CEST	443	49828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.393831968 CEST	443	49824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.394864082 CEST	49824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.394864082 CEST	49824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.394887924 CEST	443	49824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.394896984 CEST	443	49824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.491786003 CEST	443	49824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.492208004 CEST	443	49824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.495209932 CEST	49824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.507175922 CEST	49824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.507175922 CEST	49824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.507204056 CEST	443	49824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.507215023 CEST	443	49824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.594048977 CEST	49829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.594111919 CEST	443	49829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:29.594403982 CEST	49829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.617851019 CEST	49829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:29.617887974 CEST	443	49829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.198333979 CEST	443	49825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.198575974 CEST	443	49827	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.198906898 CEST	443	49826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.200002909 CEST	49825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.200002909 CEST	49825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.200023890 CEST	443	49825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.200046062 CEST	443	49825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.200596094 CEST	49827	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.200615883 CEST	443	49827	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.200647116 CEST	443	49828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.201195955 CEST	49827	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.201200962 CEST	443	49827	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.201713085 CEST	49828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.201723099 CEST	443	49828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.202610016 CEST	49828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.202622890 CEST	443	49828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.202713966 CEST	49826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.202723026 CEST	443	49826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.204859972 CEST	49826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.204864979 CEST	443	49826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.294539928 CEST	443	49825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.294574022 CEST	443	49825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.294625998 CEST	443	49825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.294742107 CEST	49825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.295197964 CEST	49825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.295232058 CEST	443	49825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.295295000 CEST	49825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.295305967 CEST	443	49825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.295310974 CEST	443	49828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.295350075 CEST	49825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.295365095 CEST	443	49825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.295417070 CEST	443	49828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.295598030 CEST	49828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.295839071 CEST	443	49827	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.296049118 CEST	443	49826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.296112061 CEST	443	49826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.296119928 CEST	443	49827	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.296180010 CEST	49826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.296576023 CEST	49827	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.297760963 CEST	49827	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.297760963 CEST	49827	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.297779083 CEST	443	49827	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.297790051 CEST	443	49827	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.299104929 CEST	49826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.299104929 CEST	49826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.299114943 CEST	443	49826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.299124002 CEST	443	49826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.300678015 CEST	49828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.300693035 CEST	443	49828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.300822973 CEST	49828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.300828934 CEST	443	49828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.306827068 CEST	49831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.306834936 CEST	49830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.306854010 CEST	443	49831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.306885004 CEST	443	49830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.308439016 CEST	49832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.308464050 CEST	443	49832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.308499098 CEST	49831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.308505058 CEST	49830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.308772087 CEST	49831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.308772087 CEST	49832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.308789015 CEST	443	49831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.308904886 CEST	49830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.308933020 CEST	443	49830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.310010910 CEST	49833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.310043097 CEST	443	49833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.310192108 CEST	49832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.310194969 CEST	49833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.310214043 CEST	443	49832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.310379028 CEST	49833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.310393095 CEST	443	49833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.370245934 CEST	443	49829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.371609926 CEST	49829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.371642113 CEST	443	49829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.372827053 CEST	49829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.372834921 CEST	443	49829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.467747927 CEST	443	49829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.467788935 CEST	443	49829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.467839956 CEST	443	49829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.467843056 CEST	49829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.467891932 CEST	49829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.475716114 CEST	49829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.475738049 CEST	443	49829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.475749016 CEST	49829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.475755930 CEST	443	49829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.481451988 CEST	49834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.481497049 CEST	443	49834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.481576920 CEST	49834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.482789993 CEST	49834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.482805014 CEST	443	49834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.878834009 CEST	49756	443	192.168.2.10	216.58.206.68
Oct 7, 2024 18:02:30.878870010 CEST	443	49756	216.58.206.68	192.168.2.10
Oct 7, 2024 18:02:30.914716959 CEST	443	49830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.915777922 CEST	49830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.915841103 CEST	443	49830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.917031050 CEST	49830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.917045116 CEST	443	49830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.920032978 CEST	443	49832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.920108080 CEST	443	49831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.920772076 CEST	49832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.920789957 CEST	443	49832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.921560049 CEST	49832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.921570063 CEST	443	49832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.922139883 CEST	49831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.922166109 CEST	443	49831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.923157930 CEST	49831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.923163891 CEST	443	49831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.929593086 CEST	443	49833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.930032015 CEST	49833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.930047035 CEST	443	49833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:30.930944920 CEST	49833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:30.930949926 CEST	443	49833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.010586977 CEST	443	49830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.010752916 CEST	443	49830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.010811090 CEST	49830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.011055946 CEST	49830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.011079073 CEST	443	49830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.015079021 CEST	443	49831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.015399933 CEST	443	49832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.015625000 CEST	443	49832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.015626907 CEST	443	49831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.015671968 CEST	49832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.015691042 CEST	443	49832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.015703917 CEST	443	49832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.015727043 CEST	49831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.015758038 CEST	49832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.016262054 CEST	49835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.016298056 CEST	443	49835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.016366005 CEST	49835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.016382933 CEST	49831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.016397953 CEST	443	49831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.017992020 CEST	49832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.017992020 CEST	49832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.018009901 CEST	443	49832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.018019915 CEST	443	49832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.019594908 CEST	49835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.019603014 CEST	443	49835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.022272110 CEST	49836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.022300005 CEST	443	49836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.022361994 CEST	49836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.023247004 CEST	49836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.023258924 CEST	443	49836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.024167061 CEST	49837	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.024189949 CEST	443	49837	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.024265051 CEST	49837	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.024405003 CEST	49837	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.024416924 CEST	443	49837	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.027524948 CEST	443	49833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.027746916 CEST	443	49833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.027802944 CEST	49833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.027832985 CEST	49833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.027832985 CEST	49833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.027846098 CEST	443	49833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.027854919 CEST	443	49833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.031137943 CEST	49838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.031145096 CEST	443	49838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.031210899 CEST	49838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.031321049 CEST	49838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.031333923 CEST	443	49838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.089584112 CEST	443	49834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.134692907 CEST	49834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.135652065 CEST	49834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.135660887 CEST	443	49834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.136655092 CEST	49834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.136658907 CEST	443	49834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.227437973 CEST	443	49834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.227528095 CEST	443	49834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.227581024 CEST	49834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.234576941 CEST	49834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.234594107 CEST	443	49834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.240585089 CEST	49839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.240633011 CEST	443	49839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.240864992 CEST	49839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.241158009 CEST	49839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.241174936 CEST	443	49839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.636241913 CEST	443	49836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.654505968 CEST	443	49838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.664215088 CEST	443	49837	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.672343016 CEST	443	49835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.681582928 CEST	49836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.697197914 CEST	49838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.712827921 CEST	49837	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.728809118 CEST	49835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.745614052 CEST	49836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.745635033 CEST	443	49836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.746383905 CEST	49836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.746391058 CEST	443	49836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.746764898 CEST	49838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.746786118 CEST	443	49838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.747200966 CEST	49838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.747210026 CEST	443	49838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.747456074 CEST	49837	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.747462988 CEST	443	49837	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.747859001 CEST	49837	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.747864008 CEST	443	49837	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.749972105 CEST	49835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.749984980 CEST	443	49835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:31.750895977 CEST	49835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:31.750901937 CEST	443	49835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.821449041 CEST	443	49836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.822053909 CEST	443	49836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.822120905 CEST	49836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.823369980 CEST	443	49838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.823720932 CEST	443	49838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.823774099 CEST	49838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.825654984 CEST	443	49837	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.825679064 CEST	443	49837	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.825715065 CEST	49837	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.825731993 CEST	443	49837	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.825747013 CEST	443	49837	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.825789928 CEST	49837	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.826838970 CEST	443	49835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.827120066 CEST	443	49835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.827245951 CEST	49835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.832874060 CEST	49836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.832930088 CEST	443	49836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.832961082 CEST	49836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.832977057 CEST	443	49836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.833229065 CEST	49838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.833255053 CEST	443	49838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.833271980 CEST	49838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.833277941 CEST	443	49838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.834578037 CEST	49837	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.834578037 CEST	49837	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.834589005 CEST	443	49837	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.834599972 CEST	443	49837	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.835220098 CEST	49835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.835220098 CEST	49835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.835247993 CEST	443	49835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.835293055 CEST	443	49835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.841672897 CEST	49840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.841708899 CEST	443	49840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.841773987 CEST	49840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.843350887 CEST	49840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.843369961 CEST	443	49840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.844583035 CEST	49841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.844613075 CEST	443	49841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.844674110 CEST	49841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.844784975 CEST	49841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.844801903 CEST	443	49841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.845406055 CEST	49842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.845413923 CEST	443	49842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.845474005 CEST	49842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.845592022 CEST	49842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.845601082 CEST	443	49842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.846956015 CEST	49843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.846981049 CEST	443	49843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.847147942 CEST	49843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.847213030 CEST	49843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.847224951 CEST	443	49843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.921494961 CEST	443	49839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.928349018 CEST	49839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.928380966 CEST	443	49839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:32.928838015 CEST	49839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:32.928843975 CEST	443	49839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.137882948 CEST	443	49839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.137957096 CEST	443	49839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.138012886 CEST	49839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.138530970 CEST	49839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.138550997 CEST	443	49839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.138561010 CEST	49839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.138566971 CEST	443	49839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.142010927 CEST	49844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.142040968 CEST	443	49844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.142101049 CEST	49844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.142376900 CEST	49844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.142393112 CEST	443	49844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.567164898 CEST	443	49841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.567450047 CEST	443	49843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.567764044 CEST	49841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.567780018 CEST	443	49841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.567958117 CEST	49843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.567989111 CEST	443	49843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.568417072 CEST	49841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.568423033 CEST	443	49841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.568602085 CEST	49843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.568617105 CEST	443	49843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.574471951 CEST	443	49840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.575035095 CEST	49840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.575062037 CEST	443	49840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.577923059 CEST	49840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.577943087 CEST	443	49840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.585319996 CEST	443	49842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.586339951 CEST	49842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.586363077 CEST	443	49842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.587135077 CEST	49842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.587141991 CEST	443	49842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.664459944 CEST	443	49843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.664566994 CEST	443	49843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.664637089 CEST	443	49843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.664665937 CEST	49843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.664719105 CEST	49843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.665021896 CEST	49843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.665050983 CEST	443	49843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.665091991 CEST	49843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.665096998 CEST	443	49843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.665779114 CEST	443	49841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.665883064 CEST	443	49841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.665944099 CEST	49841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.666224003 CEST	49841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.666237116 CEST	443	49841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.666249037 CEST	49841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.666254044 CEST	443	49841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.670274019 CEST	49845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.670314074 CEST	443	49845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.670381069 CEST	49845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.670630932 CEST	49845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.670644999 CEST	443	49845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.671415091 CEST	49846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.671423912 CEST	443	49846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.671483040 CEST	49846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.671617031 CEST	49846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.671627998 CEST	443	49846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.675863028 CEST	443	49840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.675956011 CEST	443	49840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.676007032 CEST	49840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.676209927 CEST	49840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.676220894 CEST	443	49840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.676240921 CEST	49840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.676245928 CEST	443	49840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.678384066 CEST	49847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.678422928 CEST	443	49847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.678591967 CEST	49847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.678756952 CEST	49847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.678769112 CEST	443	49847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.686167955 CEST	443	49842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.687115908 CEST	443	49842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.687156916 CEST	443	49842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.687164068 CEST	49842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.687199116 CEST	49842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.687246084 CEST	49842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.687256098 CEST	443	49842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.687266111 CEST	49842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.687271118 CEST	443	49842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.689462900 CEST	49848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.689502001 CEST	443	49848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.689688921 CEST	49848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.689779043 CEST	49848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.689800024 CEST	443	49848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.818881035 CEST	443	49844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.819480896 CEST	49844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.819499016 CEST	443	49844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.820009947 CEST	49844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.820014954 CEST	443	49844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.936122894 CEST	80	49750	216.219.112.176	192.168.2.10
Oct 7, 2024 18:02:33.936321020 CEST	49750	80	192.168.2.10	216.219.112.176
Oct 7, 2024 18:02:33.944703102 CEST	443	49844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.945008039 CEST	443	49844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.945127964 CEST	49844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.945241928 CEST	49844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.945270061 CEST	443	49844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.945281982 CEST	49844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.945287943 CEST	443	49844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.948991060 CEST	49849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.949043989 CEST	443	49849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:33.949114084 CEST	49849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.949269056 CEST	49849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:33.949275970 CEST	443	49849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.300960064 CEST	443	49847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.301455021 CEST	443	49845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.301623106 CEST	49847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.301645041 CEST	443	49847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.302016973 CEST	49845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.302050114 CEST	443	49845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.302298069 CEST	49847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.302304983 CEST	443	49847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.302515030 CEST	49845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.302521944 CEST	443	49845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.310383081 CEST	443	49846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.310823917 CEST	49846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.310849905 CEST	443	49846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.311268091 CEST	49846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.311273098 CEST	443	49846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.312505960 CEST	443	49848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.312860966 CEST	49848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.312887907 CEST	443	49848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.313241005 CEST	49848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.313246012 CEST	443	49848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.396028042 CEST	443	49847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.396311998 CEST	443	49847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.396364927 CEST	443	49847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.396400928 CEST	49847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.396509886 CEST	49847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.396509886 CEST	49847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.396795988 CEST	49847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.396817923 CEST	443	49847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.398689985 CEST	443	49845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.399667025 CEST	49850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.399705887 CEST	443	49845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.399714947 CEST	443	49850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.399758101 CEST	443	49845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.399857044 CEST	49850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.399862051 CEST	49845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.399862051 CEST	49845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.399904966 CEST	49845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.399904966 CEST	49845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.399920940 CEST	443	49845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.399930000 CEST	443	49845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.400136948 CEST	49850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.400151968 CEST	443	49850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.403965950 CEST	49851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.404006958 CEST	443	49851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.404226065 CEST	49851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.404226065 CEST	49851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.404261112 CEST	443	49851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.407296896 CEST	443	49846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.408027887 CEST	443	49848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.408515930 CEST	443	49846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.408627033 CEST	49846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.408627033 CEST	49846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.408647060 CEST	49846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.408653021 CEST	443	49846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.408710003 CEST	443	49848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.408869028 CEST	49848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.408915043 CEST	49848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.408915043 CEST	49848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.408936977 CEST	443	49848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.408946991 CEST	443	49848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.411076069 CEST	49853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.411082029 CEST	49852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.411101103 CEST	443	49853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.411108017 CEST	443	49852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.411183119 CEST	49853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.411187887 CEST	49852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.411398888 CEST	49853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.411405087 CEST	49852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.411412001 CEST	443	49853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.411416054 CEST	443	49852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.468076944 CEST	49750	80	192.168.2.10	216.219.112.176
Oct 7, 2024 18:02:34.473150969 CEST	80	49750	216.219.112.176	192.168.2.10
Oct 7, 2024 18:02:34.561100006 CEST	443	49849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.562144995 CEST	49849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.562144995 CEST	49849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.562186956 CEST	443	49849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.562196016 CEST	443	49849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.657430887 CEST	443	49849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.657485962 CEST	443	49849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.657603025 CEST	443	49849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.657691002 CEST	49849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.657890081 CEST	49849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.657890081 CEST	49849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.657918930 CEST	443	49849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.657947063 CEST	49849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.657953978 CEST	443	49849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.661155939 CEST	49854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.661206007 CEST	443	49854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:34.661377907 CEST	49854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.661521912 CEST	49854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:34.661535025 CEST	443	49854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.028165102 CEST	443	49850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.029350996 CEST	49850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.029350996 CEST	49850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.029385090 CEST	443	49850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.029402971 CEST	443	49850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.035418987 CEST	443	49852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.035974979 CEST	49852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.035991907 CEST	443	49852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.036472082 CEST	49852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.036475897 CEST	443	49852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.047503948 CEST	443	49851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.048002005 CEST	49851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.048027039 CEST	443	49851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.048439026 CEST	49851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.048444986 CEST	443	49851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.140275002 CEST	443	49853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.141695976 CEST	49853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.141695976 CEST	49853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.141731024 CEST	443	49853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.141743898 CEST	443	49853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.143923998 CEST	443	49850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.143996000 CEST	443	49850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.144118071 CEST	443	49852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.144181013 CEST	443	49852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.144215107 CEST	49850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.144325018 CEST	49852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.144325018 CEST	49852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.144360065 CEST	49850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.144366980 CEST	49852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.144376993 CEST	443	49850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.144380093 CEST	443	49852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.144403934 CEST	49850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.144411087 CEST	443	49850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.147124052 CEST	443	49851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.147237062 CEST	443	49851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.147592068 CEST	49851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.147592068 CEST	49851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.147731066 CEST	49851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.147747040 CEST	443	49851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.148257017 CEST	49855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.148268938 CEST	49856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.148287058 CEST	443	49855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.148289919 CEST	443	49856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.148379087 CEST	49856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.148444891 CEST	49855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.148593903 CEST	49855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.148602009 CEST	443	49855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.148632050 CEST	49856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.148648024 CEST	443	49856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.149844885 CEST	49857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.149879932 CEST	443	49857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.150120020 CEST	49857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.150120020 CEST	49857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.150146961 CEST	443	49857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.241328955 CEST	443	49853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.242168903 CEST	443	49853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.242218018 CEST	443	49853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.242398024 CEST	49853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.242398977 CEST	49853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.242827892 CEST	49853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.242844105 CEST	443	49853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.245630980 CEST	49858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.245672941 CEST	443	49858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.245829105 CEST	49858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.246032000 CEST	49858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.246042967 CEST	443	49858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.332045078 CEST	443	49854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.337794065 CEST	49854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.337829113 CEST	443	49854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.339237928 CEST	49854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.339255095 CEST	443	49854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.435506105 CEST	443	49854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.436427116 CEST	443	49854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.436491966 CEST	49854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.436589003 CEST	49854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.436605930 CEST	443	49854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.436629057 CEST	49854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.436635971 CEST	443	49854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.440006971 CEST	49859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.440037012 CEST	443	49859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.440109968 CEST	49859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.440412998 CEST	49859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.440423965 CEST	443	49859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.755532980 CEST	443	49855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.756195068 CEST	49855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.756222010 CEST	443	49855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.756692886 CEST	49855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.756699085 CEST	443	49855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.786036968 CEST	443	49857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.786601067 CEST	49857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.786621094 CEST	443	49857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.787250996 CEST	49857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.787257910 CEST	443	49857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.791623116 CEST	443	49856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.792083025 CEST	49856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.792102098 CEST	443	49856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.792500019 CEST	49856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.792506933 CEST	443	49856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.851432085 CEST	443	49855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.851463079 CEST	443	49855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.851511955 CEST	443	49855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.851521969 CEST	49855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.851567984 CEST	49855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.851756096 CEST	49855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.851773024 CEST	443	49855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.851784945 CEST	49855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.851789951 CEST	443	49855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.855408907 CEST	49860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.855439901 CEST	443	49860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.855510950 CEST	49860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.855784893 CEST	49860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.855802059 CEST	443	49860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.879291058 CEST	443	49858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.879849911 CEST	49858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.879870892 CEST	443	49858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.880539894 CEST	49858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.880546093 CEST	443	49858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.890284061 CEST	443	49856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.890613079 CEST	443	49856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.890670061 CEST	49856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.890731096 CEST	49856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.890746117 CEST	443	49856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.890762091 CEST	49856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.890768051 CEST	443	49856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.894103050 CEST	49861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.894145966 CEST	443	49861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.894211054 CEST	49861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.894479990 CEST	49861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.894489050 CEST	443	49861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.941905975 CEST	443	49857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.942316055 CEST	443	49857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.942373991 CEST	49857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.942456007 CEST	49857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.942481041 CEST	443	49857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.942512035 CEST	49857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.942517996 CEST	443	49857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.946229935 CEST	49862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.946280003 CEST	443	49862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.946351051 CEST	49862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.946568966 CEST	49862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.946577072 CEST	443	49862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.977016926 CEST	443	49858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.977238894 CEST	443	49858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.977291107 CEST	49858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.977382898 CEST	49858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.977408886 CEST	443	49858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.977421045 CEST	49858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.977427006 CEST	443	49858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.981827974 CEST	49863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.981864929 CEST	443	49863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:35.981956005 CEST	49863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.982142925 CEST	49863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:35.982156992 CEST	443	49863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.073884964 CEST	443	49859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.074645042 CEST	49859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.074671030 CEST	443	49859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.075174093 CEST	49859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.075180054 CEST	443	49859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.172763109 CEST	443	49859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.172827959 CEST	443	49859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.172873020 CEST	443	49859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.172884941 CEST	49859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.172935963 CEST	49859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.173290968 CEST	49859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.173310041 CEST	443	49859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.173348904 CEST	49859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.173362970 CEST	443	49859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.176879883 CEST	49864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.176929951 CEST	443	49864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.177015066 CEST	49864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.177263975 CEST	49864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.177275896 CEST	443	49864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.632070065 CEST	443	49860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.633198023 CEST	49860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.633198023 CEST	49860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.633219004 CEST	443	49860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.633232117 CEST	443	49860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.641666889 CEST	443	49861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.642296076 CEST	49861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.642317057 CEST	443	49861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.642993927 CEST	49861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.643004894 CEST	443	49861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.837966919 CEST	58799	53	192.168.2.10	162.159.36.2
Oct 7, 2024 18:02:36.840606928 CEST	443	49863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.841537952 CEST	49863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.841557980 CEST	443	49863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.842242956 CEST	49863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.842246056 CEST	443	49863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.843676090 CEST	53	58799	162.159.36.2	192.168.2.10
Oct 7, 2024 18:02:36.843815088 CEST	58799	53	192.168.2.10	162.159.36.2
Oct 7, 2024 18:02:36.843815088 CEST	58799	53	192.168.2.10	162.159.36.2
Oct 7, 2024 18:02:36.844675064 CEST	443	49860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.844754934 CEST	443	49860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.844935894 CEST	49860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.844980001 CEST	49860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.844980001 CEST	49860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.844993114 CEST	443	49860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.845000982 CEST	443	49860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.848623991 CEST	58800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.848696947 CEST	443	58800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.848809958 CEST	58800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.848834038 CEST	53	58799	162.159.36.2	192.168.2.10
Oct 7, 2024 18:02:36.849041939 CEST	58800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.849071026 CEST	443	58800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.855338097 CEST	443	49861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.855359077 CEST	443	49861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.855415106 CEST	443	49861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.855530977 CEST	49861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.855668068 CEST	49861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.855760098 CEST	49861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.855760098 CEST	49861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.855772972 CEST	443	49861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.855781078 CEST	443	49861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.859307051 CEST	58801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.859354973 CEST	443	58801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.859814882 CEST	58801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.859814882 CEST	58801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.859853983 CEST	443	58801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.928214073 CEST	443	49862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.929183960 CEST	49862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.929207087 CEST	443	49862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.929502964 CEST	49862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.929507971 CEST	443	49862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.938518047 CEST	443	49863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.938585997 CEST	443	49863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.938966990 CEST	49863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.938966990 CEST	49863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.938966990 CEST	49863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.942316055 CEST	58802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.942373037 CEST	443	58802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:36.942662954 CEST	58802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.942662954 CEST	58802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:36.942704916 CEST	443	58802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.029190063 CEST	443	49862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.029272079 CEST	443	49862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.029665947 CEST	49862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.029937029 CEST	49862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.029937029 CEST	49862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.029957056 CEST	443	49862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.029963970 CEST	443	49862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.032846928 CEST	443	49864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.033296108 CEST	58803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.033328056 CEST	443	58803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.033428907 CEST	58803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.033849955 CEST	49864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.033874035 CEST	443	49864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.034658909 CEST	49864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.034663916 CEST	443	49864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.035095930 CEST	58803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.035116911 CEST	443	58803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.135653019 CEST	443	49864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.135720968 CEST	443	49864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.135876894 CEST	49864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.136409998 CEST	49864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.136409998 CEST	49864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.136436939 CEST	443	49864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.136441946 CEST	443	49864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.140657902 CEST	58804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.140703917 CEST	443	58804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.141035080 CEST	58804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.141035080 CEST	58804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.141074896 CEST	443	58804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.246814013 CEST	49863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.246840000 CEST	443	49863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.270076990 CEST	53	58799	162.159.36.2	192.168.2.10
Oct 7, 2024 18:02:37.271363020 CEST	58799	53	192.168.2.10	162.159.36.2
Oct 7, 2024 18:02:37.276937008 CEST	53	58799	162.159.36.2	192.168.2.10
Oct 7, 2024 18:02:37.277086020 CEST	58799	53	192.168.2.10	162.159.36.2
Oct 7, 2024 18:02:37.489886045 CEST	443	58801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.490495920 CEST	58801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.490525007 CEST	443	58801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.491316080 CEST	58801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.491333961 CEST	443	58801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.497208118 CEST	443	58800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.497675896 CEST	58800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.497704029 CEST	443	58800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.498259068 CEST	58800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.498264074 CEST	443	58800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.563483000 CEST	443	58802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.564122915 CEST	58802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.564161062 CEST	443	58802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.564810038 CEST	58802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.564821005 CEST	443	58802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.588037014 CEST	443	58801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.588099957 CEST	443	58801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.588146925 CEST	58801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.588465929 CEST	58801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.588486910 CEST	443	58801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.588500977 CEST	58801	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.588506937 CEST	443	58801	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.592494965 CEST	58806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.592525005 CEST	443	58806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.592582941 CEST	58806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.592752934 CEST	58806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.592760086 CEST	443	58806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.597910881 CEST	443	58800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.597980022 CEST	443	58800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.598022938 CEST	58800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.598164082 CEST	58800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.598179102 CEST	443	58800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.598191977 CEST	58800	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.598197937 CEST	443	58800	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.601047993 CEST	58807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.601075888 CEST	443	58807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.601135969 CEST	58807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.601696968 CEST	58807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.601706982 CEST	443	58807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.648041010 CEST	443	58803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.648689032 CEST	58803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.648720026 CEST	443	58803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.649178982 CEST	58803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.649183989 CEST	443	58803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.659511089 CEST	443	58802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.659585953 CEST	443	58802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.659631014 CEST	58802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.659833908 CEST	58802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.659853935 CEST	443	58802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.659863949 CEST	58802	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.659869909 CEST	443	58802	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.663484097 CEST	58808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.663533926 CEST	443	58808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.663602114 CEST	58808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.663851023 CEST	58808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.663861990 CEST	443	58808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.743630886 CEST	443	58803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.743925095 CEST	443	58803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.744002104 CEST	58803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.744083881 CEST	58803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.744102001 CEST	443	58803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.744115114 CEST	58803	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.744121075 CEST	443	58803	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.749644995 CEST	58809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.749686956 CEST	443	58809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.749757051 CEST	58809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.749926090 CEST	58809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.749938011 CEST	443	58809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.752475977 CEST	443	58804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.752959013 CEST	58804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.752974987 CEST	443	58804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.753547907 CEST	58804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.753551960 CEST	443	58804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.848702908 CEST	443	58804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.848740101 CEST	443	58804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.848788023 CEST	58804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.848789930 CEST	443	58804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.848937035 CEST	58804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.849210978 CEST	58804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.849225998 CEST	443	58804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.849237919 CEST	58804	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.849242926 CEST	443	58804	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.852910042 CEST	58810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.852942944 CEST	443	58810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:37.853005886 CEST	58810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.853176117 CEST	58810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:37.853185892 CEST	443	58810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.225239038 CEST	443	58806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.225864887 CEST	58806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.225888014 CEST	443	58806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.226401091 CEST	58806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.226412058 CEST	443	58806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.233181953 CEST	443	58807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.233757019 CEST	58807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.233777046 CEST	443	58807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.234338999 CEST	58807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.234344959 CEST	443	58807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.320410013 CEST	443	58806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.320760965 CEST	443	58806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.320818901 CEST	58806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.320878029 CEST	58806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.320893049 CEST	443	58806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.320904016 CEST	58806	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.320909977 CEST	443	58806	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.324266911 CEST	443	58808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.324927092 CEST	58808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.324959993 CEST	443	58808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.325483084 CEST	58808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.325490952 CEST	443	58808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.325608015 CEST	58811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.325632095 CEST	443	58811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.325707912 CEST	58811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.325833082 CEST	58811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.325839996 CEST	443	58811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.333971977 CEST	443	58807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.341233969 CEST	443	58807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.341294050 CEST	58807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.341381073 CEST	58807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.341397047 CEST	443	58807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.341600895 CEST	58807	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.341608047 CEST	443	58807	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.345702887 CEST	58812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.345756054 CEST	443	58812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.345916986 CEST	58812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.346122026 CEST	58812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.346132994 CEST	443	58812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.377033949 CEST	443	58809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.377904892 CEST	58809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.377929926 CEST	443	58809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.378511906 CEST	58809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.378515959 CEST	443	58809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.423521042 CEST	443	58808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.424007893 CEST	443	58808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.424245119 CEST	58808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.424547911 CEST	58808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.424547911 CEST	58808	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.424570084 CEST	443	58808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.424575090 CEST	443	58808	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.431482077 CEST	58814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.431526899 CEST	443	58814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.435096979 CEST	58814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.435096979 CEST	58814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.435134888 CEST	443	58814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.491372108 CEST	443	58810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.491952896 CEST	58810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.492000103 CEST	443	58810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.492491007 CEST	58810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.492496967 CEST	443	58810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.527288914 CEST	443	58809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.527302027 CEST	443	58809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.527381897 CEST	58809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.527401924 CEST	443	58809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.527503014 CEST	443	58809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.527697086 CEST	58809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.527697086 CEST	58809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.527715921 CEST	443	58809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.527755976 CEST	58809	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.527770996 CEST	443	58809	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.530663013 CEST	58815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.530713081 CEST	443	58815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.530966043 CEST	58815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.530966043 CEST	58815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.530997038 CEST	443	58815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.586879969 CEST	443	58810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.587821007 CEST	443	58810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.587903976 CEST	443	58810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.587928057 CEST	58810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.588061094 CEST	58810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.588107109 CEST	58810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.588107109 CEST	58810	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.588128090 CEST	443	58810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.588131905 CEST	443	58810	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.591290951 CEST	58816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.591336966 CEST	443	58816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.591547966 CEST	58816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.591547966 CEST	58816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.591584921 CEST	443	58816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.992712975 CEST	443	58812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.993810892 CEST	58812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.993827105 CEST	443	58812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:38.993956089 CEST	58812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:38.993962049 CEST	443	58812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.081382036 CEST	443	58814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.082586050 CEST	58814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.082586050 CEST	58814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.082614899 CEST	443	58814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.082638979 CEST	443	58814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.095232964 CEST	443	58812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.095335960 CEST	443	58812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.095611095 CEST	58812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.095663071 CEST	58812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.095690966 CEST	443	58812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.095771074 CEST	58812	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.095777035 CEST	443	58812	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.098907948 CEST	58817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.098953962 CEST	443	58817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.099286079 CEST	58817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.099286079 CEST	58817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.099322081 CEST	443	58817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.135935068 CEST	443	58815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.136923075 CEST	58815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.136923075 CEST	58815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.136939049 CEST	443	58815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.136955976 CEST	443	58815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.182276964 CEST	443	58814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.182527065 CEST	443	58814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.182588100 CEST	443	58814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.182672977 CEST	58814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.182672977 CEST	58814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.182725906 CEST	58814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.182744026 CEST	443	58814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.182771921 CEST	58814	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.182777882 CEST	443	58814	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.186347008 CEST	58818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.186392069 CEST	443	58818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.186666012 CEST	58818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.186666012 CEST	58818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.186700106 CEST	443	58818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.214570999 CEST	443	58816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.215787888 CEST	58816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.215789080 CEST	58816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.215852022 CEST	443	58816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.215869904 CEST	443	58816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.231626987 CEST	443	58815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.232295036 CEST	443	58815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.232425928 CEST	58815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.232482910 CEST	58815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.232482910 CEST	58815	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.232505083 CEST	443	58815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.232515097 CEST	443	58815	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.235632896 CEST	58819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.235680103 CEST	443	58819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.236002922 CEST	58819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.236002922 CEST	58819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.236040115 CEST	443	58819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.309843063 CEST	443	58816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.309873104 CEST	443	58816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.310040951 CEST	58816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.310086966 CEST	443	58816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.310189009 CEST	443	58816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.310286045 CEST	58816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.310286045 CEST	58816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.310321093 CEST	443	58816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.310343981 CEST	58816	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.310352087 CEST	443	58816	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.313451052 CEST	58820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.313499928 CEST	443	58820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.313786030 CEST	58820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.313786030 CEST	58820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.313817978 CEST	443	58820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.328233957 CEST	443	58811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.329332113 CEST	58811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.329332113 CEST	58811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.329368114 CEST	443	58811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.329390049 CEST	443	58811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.431452990 CEST	443	58811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.431860924 CEST	443	58811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.431924105 CEST	443	58811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.431922913 CEST	58811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.431973934 CEST	58811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.432039976 CEST	58811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.432065010 CEST	443	58811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.432084084 CEST	58811	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.432090998 CEST	443	58811	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.436156988 CEST	58821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.436206102 CEST	443	58821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.436275005 CEST	58821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.436526060 CEST	58821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.436537981 CEST	443	58821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.745682955 CEST	443	58817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.746562004 CEST	58817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.746591091 CEST	443	58817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.747064114 CEST	58817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.747068882 CEST	443	58817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.813255072 CEST	443	58818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.814023972 CEST	58818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.814058065 CEST	443	58818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.814896107 CEST	58818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.814903975 CEST	443	58818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.841281891 CEST	443	58817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.841314077 CEST	443	58817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.841376066 CEST	443	58817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.841381073 CEST	58817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.841428995 CEST	58817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.841825008 CEST	58817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.841845989 CEST	443	58817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.841871023 CEST	58817	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.841876984 CEST	443	58817	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.845845938 CEST	58822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.845906019 CEST	443	58822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.845973969 CEST	58822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.846187115 CEST	58822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.846204996 CEST	443	58822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.869677067 CEST	443	58819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.870357990 CEST	58819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.870387077 CEST	443	58819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.870852947 CEST	58819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.870862961 CEST	443	58819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.917541027 CEST	443	58818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.917599916 CEST	443	58818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.917655945 CEST	443	58818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.917690039 CEST	58818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.917717934 CEST	58818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.918256044 CEST	58818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.918273926 CEST	443	58818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.918282986 CEST	58818	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.918288946 CEST	443	58818	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.921866894 CEST	58823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.921915054 CEST	443	58823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.921988964 CEST	58823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.922179937 CEST	58823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.922194004 CEST	443	58823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.943994999 CEST	443	58820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.944581985 CEST	58820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.944602966 CEST	443	58820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.945115089 CEST	58820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.945123911 CEST	443	58820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.966841936 CEST	443	58819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.966929913 CEST	443	58819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.967071056 CEST	58819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.967363119 CEST	58819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.967397928 CEST	443	58819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.967418909 CEST	58819	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.967427015 CEST	443	58819	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.970941067 CEST	58824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.971013069 CEST	443	58824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:39.971091986 CEST	58824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.971337080 CEST	58824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:39.971373081 CEST	443	58824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.042979002 CEST	443	58820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.045893908 CEST	443	58820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.045954943 CEST	58820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.046077967 CEST	58820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.046109915 CEST	443	58820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.046123028 CEST	58820	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.046129942 CEST	443	58820	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.049895048 CEST	58825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.049942017 CEST	443	58825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.050019026 CEST	58825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.050196886 CEST	58825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.050208092 CEST	443	58825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.077116966 CEST	443	58821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.077883005 CEST	58821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.077914953 CEST	443	58821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.078382015 CEST	58821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.078397036 CEST	443	58821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.177331924 CEST	443	58821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.177442074 CEST	443	58821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.177495003 CEST	58821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.177736998 CEST	58821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.177758932 CEST	443	58821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.177771091 CEST	58821	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.177777052 CEST	443	58821	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.181847095 CEST	58826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.181896925 CEST	443	58826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.181986094 CEST	58826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.182176113 CEST	58826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.182185888 CEST	443	58826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.636399984 CEST	443	58822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.636410952 CEST	443	58823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.636990070 CEST	58823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.637012959 CEST	443	58823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.637037992 CEST	58822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.637042999 CEST	443	58822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.638622999 CEST	58822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.638623953 CEST	58823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.638626099 CEST	443	58822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.638634920 CEST	443	58823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.732680082 CEST	443	58823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.732804060 CEST	443	58823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.735213041 CEST	58823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.735213041 CEST	58823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.735266924 CEST	58823	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.735285997 CEST	443	58823	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.738102913 CEST	443	58822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.738360882 CEST	443	58822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.738408089 CEST	443	58822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.738570929 CEST	58822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.738573074 CEST	58828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.738601923 CEST	443	58828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.738610029 CEST	58822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.738614082 CEST	443	58822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.738627911 CEST	58822	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.738631964 CEST	443	58822	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.738859892 CEST	58828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.738859892 CEST	58828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.738883018 CEST	443	58828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.740833998 CEST	58829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.740869045 CEST	443	58829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.741067886 CEST	58829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.741069078 CEST	58829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.741095066 CEST	443	58829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.807696104 CEST	443	58824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.809274912 CEST	443	58825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.810048103 CEST	58824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.810071945 CEST	443	58824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.810828924 CEST	58824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.810831070 CEST	58825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.810837984 CEST	443	58824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.810863018 CEST	443	58825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.811539888 CEST	58825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.811552048 CEST	443	58825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.880594015 CEST	443	58826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.881722927 CEST	58826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.881722927 CEST	58826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.881755114 CEST	443	58826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.881778002 CEST	443	58826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.902479887 CEST	443	58824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.902528048 CEST	443	58824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.902580976 CEST	443	58824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.904017925 CEST	443	58825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.904197931 CEST	58824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.904232025 CEST	58824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.904232025 CEST	58824	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.904248953 CEST	443	58824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.904279947 CEST	443	58824	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.904551029 CEST	443	58825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.905205011 CEST	58825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.905205011 CEST	58825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.905232906 CEST	58825	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.905245066 CEST	443	58825	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.908683062 CEST	58830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.908685923 CEST	58831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.908714056 CEST	443	58831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.908725023 CEST	443	58830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.908802986 CEST	58830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.908804893 CEST	58831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.909004927 CEST	58830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.909006119 CEST	58831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.909017086 CEST	443	58830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.909024954 CEST	443	58831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.976813078 CEST	443	58826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.977478981 CEST	443	58826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.977535009 CEST	443	58826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.977569103 CEST	58826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.977646112 CEST	58826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.977646112 CEST	58826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.978267908 CEST	58826	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.978283882 CEST	443	58826	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.980837107 CEST	58832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.980860949 CEST	443	58832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:40.981085062 CEST	58832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.981085062 CEST	58832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:40.981111050 CEST	443	58832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.354209900 CEST	443	58829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.354819059 CEST	58829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.354846954 CEST	443	58829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.355514050 CEST	58829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.355523109 CEST	443	58829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.376652002 CEST	443	58828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.377633095 CEST	58828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.377633095 CEST	58828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.377655983 CEST	443	58828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.377698898 CEST	443	58828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.450042009 CEST	443	58829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.450119972 CEST	443	58829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.450170994 CEST	58829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.450491905 CEST	58829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.450512886 CEST	443	58829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.450525045 CEST	58829	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.450531960 CEST	443	58829	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.454272032 CEST	58833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.454304934 CEST	443	58833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.454382896 CEST	58833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.454528093 CEST	58833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.454535961 CEST	443	58833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.486574888 CEST	443	58828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.487708092 CEST	443	58828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.487766981 CEST	58828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.487906933 CEST	58828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.487922907 CEST	443	58828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.488022089 CEST	58828	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.488029003 CEST	443	58828	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.491468906 CEST	58834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.491487026 CEST	443	58834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.491550922 CEST	58834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.491745949 CEST	58834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.491755009 CEST	443	58834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.537883997 CEST	443	58830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.539691925 CEST	443	58831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.544426918 CEST	58830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.544464111 CEST	443	58830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.545435905 CEST	58830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.545450926 CEST	443	58830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.545871973 CEST	58831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.545893908 CEST	443	58831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.546878099 CEST	58831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.546883106 CEST	443	58831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.631256104 CEST	443	58832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.631814003 CEST	58832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.631859064 CEST	443	58832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.632424116 CEST	58832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.632430077 CEST	443	58832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.636253119 CEST	443	58830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.636903048 CEST	443	58830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.636965036 CEST	58830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.637435913 CEST	58830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.637459040 CEST	443	58830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.637470007 CEST	58830	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.637475967 CEST	443	58830	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.637569904 CEST	443	58831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.637645960 CEST	443	58831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.637753963 CEST	58831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.637989044 CEST	58831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.638001919 CEST	443	58831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.638017893 CEST	58831	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.638022900 CEST	443	58831	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.642646074 CEST	58835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.642690897 CEST	443	58835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.642760038 CEST	58835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.643094063 CEST	58835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.643109083 CEST	443	58835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.643136024 CEST	58836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.643174887 CEST	443	58836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.643232107 CEST	58836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.643474102 CEST	58836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.643490076 CEST	443	58836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.731034994 CEST	443	58832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.731091976 CEST	443	58832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.731164932 CEST	58832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.731466055 CEST	58832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.731486082 CEST	443	58832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.731498003 CEST	58832	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.731503963 CEST	443	58832	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.734891891 CEST	58838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.734952927 CEST	443	58838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:41.735018015 CEST	58838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.735157013 CEST	58838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:41.735172033 CEST	443	58838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.087950945 CEST	443	58833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.088574886 CEST	58833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.088596106 CEST	443	58833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.089090109 CEST	58833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.089096069 CEST	443	58833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.145123005 CEST	443	58834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.145638943 CEST	58834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.145656109 CEST	443	58834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.146229982 CEST	58834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.146234989 CEST	443	58834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.187668085 CEST	443	58833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.187702894 CEST	443	58833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.187753916 CEST	58833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.187760115 CEST	443	58833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.187807083 CEST	58833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.188121080 CEST	58833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.188144922 CEST	443	58833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.188154936 CEST	58833	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.188169956 CEST	443	58833	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.191610098 CEST	58839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.191658974 CEST	443	58839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.191729069 CEST	58839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.191931009 CEST	58839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.191941023 CEST	443	58839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.240921021 CEST	443	58834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.241126060 CEST	443	58834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.241177082 CEST	58834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.241333961 CEST	58834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.241348982 CEST	443	58834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.241362095 CEST	58834	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.241369009 CEST	443	58834	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.244807005 CEST	58840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.244853020 CEST	443	58840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.244923115 CEST	58840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.245069981 CEST	58840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.245083094 CEST	443	58840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.249869108 CEST	443	58835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.250345945 CEST	58835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.250376940 CEST	443	58835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.250910997 CEST	58835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.250917912 CEST	443	58835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.260904074 CEST	443	58836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.261575937 CEST	58836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.261610985 CEST	443	58836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.262006044 CEST	58836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.262012005 CEST	443	58836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.346467972 CEST	443	58838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.347245932 CEST	58838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.347273111 CEST	443	58838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.347827911 CEST	58838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.347839117 CEST	443	58838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.348479986 CEST	443	58835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.349167109 CEST	443	58835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.349215984 CEST	443	58835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.349222898 CEST	58835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.349256992 CEST	58835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.349311113 CEST	58835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.349328995 CEST	443	58835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.349359989 CEST	58835	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.349365950 CEST	443	58835	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.352556944 CEST	58841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.352591038 CEST	443	58841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.352839947 CEST	58841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.352839947 CEST	58841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.352874994 CEST	443	58841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.358508110 CEST	443	58836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.358580112 CEST	443	58836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.358635902 CEST	58836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.358751059 CEST	58836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.358769894 CEST	443	58836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.358783960 CEST	58836	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.358789921 CEST	443	58836	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.361360073 CEST	58842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.361391068 CEST	443	58842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.361591101 CEST	58842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.361591101 CEST	58842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.361615896 CEST	443	58842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.442303896 CEST	443	58838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.442472935 CEST	443	58838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.442517996 CEST	443	58838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.442701101 CEST	58838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.442701101 CEST	58838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.442888021 CEST	58838	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.442914009 CEST	443	58838	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.446161032 CEST	58843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.446197987 CEST	443	58843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.446418047 CEST	58843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.446418047 CEST	58843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.446444988 CEST	443	58843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.858648062 CEST	443	58839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.859895945 CEST	58839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.859895945 CEST	58839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.859980106 CEST	443	58839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.860013008 CEST	443	58839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.877187014 CEST	443	58840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.877852917 CEST	58840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.877893925 CEST	443	58840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.878468990 CEST	58840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.878475904 CEST	443	58840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.959373951 CEST	443	58839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.959508896 CEST	443	58839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.959593058 CEST	58839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.959806919 CEST	58839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.959806919 CEST	58839	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.959826946 CEST	443	58839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.959841967 CEST	443	58839	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.963253975 CEST	58844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.963323116 CEST	443	58844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.963984966 CEST	58844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.964142084 CEST	58844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.964167118 CEST	443	58844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.973212957 CEST	443	58842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.973783970 CEST	443	58841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.974535942 CEST	443	58840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.974564075 CEST	443	58840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.974608898 CEST	443	58840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.974636078 CEST	58840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.974725008 CEST	58840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.974936962 CEST	58842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.974951029 CEST	443	58842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.974971056 CEST	58842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.974971056 CEST	58841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.974977016 CEST	443	58842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.974992037 CEST	443	58841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.975327969 CEST	58841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.975334883 CEST	443	58841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.975841045 CEST	58840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.975869894 CEST	443	58840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.975893974 CEST	58840	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.975904942 CEST	443	58840	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.979108095 CEST	58845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.979142904 CEST	443	58845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:42.979367018 CEST	58845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.979367018 CEST	58845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:42.979406118 CEST	443	58845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.068650961 CEST	443	58842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.068674088 CEST	443	58842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.068892002 CEST	58842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.068903923 CEST	443	58842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.069247961 CEST	58842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.069247961 CEST	58842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.069247961 CEST	58842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.070764065 CEST	443	58841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.070842028 CEST	443	58841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.070943117 CEST	58841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.071248055 CEST	58841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.071248055 CEST	58841	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.071259975 CEST	443	58841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.071269035 CEST	443	58841	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.073513985 CEST	58846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.073523045 CEST	58847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.073554993 CEST	443	58846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.073590994 CEST	443	58847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.074193001 CEST	58846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.074194908 CEST	58847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.074414968 CEST	58846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.074419022 CEST	58847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.074428082 CEST	443	58846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.074436903 CEST	443	58847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.081783056 CEST	443	58843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.084033966 CEST	58843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.084059000 CEST	443	58843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.084382057 CEST	58843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.084394932 CEST	443	58843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.182600975 CEST	443	58843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.182627916 CEST	443	58843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.182703018 CEST	443	58843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.182765961 CEST	58843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.182786942 CEST	58843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.183033943 CEST	58843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.183033943 CEST	58843	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.183051109 CEST	443	58843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.183058977 CEST	443	58843	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.186362028 CEST	58848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.186408043 CEST	443	58848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.186561108 CEST	58848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.188627005 CEST	58848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.188646078 CEST	443	58848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.371011019 CEST	58842	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.371052980 CEST	443	58842	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.578399897 CEST	443	58844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.579260111 CEST	58844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.579277992 CEST	443	58844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.580338955 CEST	58844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.580346107 CEST	443	58844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.600577116 CEST	443	58845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.601560116 CEST	58845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.601589918 CEST	443	58845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.602360010 CEST	58845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.602370977 CEST	443	58845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.692328930 CEST	443	58846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.692900896 CEST	58846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.692919970 CEST	443	58846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.693412066 CEST	58846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.693418980 CEST	443	58846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.696522951 CEST	443	58847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.696955919 CEST	58847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.696985960 CEST	443	58847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.697454929 CEST	58847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.697467089 CEST	443	58847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.698986053 CEST	443	58845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.699100971 CEST	443	58845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.699162006 CEST	58845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.699404001 CEST	58845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.699420929 CEST	443	58845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.699439049 CEST	58845	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.699445009 CEST	443	58845	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.702728987 CEST	58849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.702778101 CEST	443	58849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.702841043 CEST	58849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.702986002 CEST	58849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.703001976 CEST	443	58849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.729748011 CEST	443	58844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.729790926 CEST	443	58844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.729847908 CEST	58844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.729863882 CEST	443	58844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.729873896 CEST	443	58844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.729919910 CEST	58844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.730336905 CEST	58844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.730353117 CEST	443	58844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.730364084 CEST	58844	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.730369091 CEST	443	58844	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.733776093 CEST	58850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.733823061 CEST	443	58850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.733885050 CEST	58850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.734050035 CEST	58850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.734061003 CEST	443	58850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.789278984 CEST	443	58846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.789328098 CEST	443	58846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.789381981 CEST	443	58846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.789385080 CEST	58846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.789433956 CEST	58846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.789741993 CEST	58846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.789761066 CEST	443	58846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.789777994 CEST	58846	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.789784908 CEST	443	58846	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.793045044 CEST	443	58847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.793214083 CEST	443	58847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.793350935 CEST	58847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.793440104 CEST	58847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.793487072 CEST	443	58847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.793540001 CEST	58847	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.793556929 CEST	443	58847	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.793673038 CEST	58851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.793725967 CEST	443	58851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.793797016 CEST	58851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.794208050 CEST	58851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.794235945 CEST	443	58851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.797413111 CEST	58852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.797435045 CEST	443	58852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.797522068 CEST	58852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.797678947 CEST	58852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.797689915 CEST	443	58852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.806262970 CEST	443	58848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.806866884 CEST	58848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.806891918 CEST	443	58848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.807214975 CEST	58848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.807223082 CEST	443	58848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.902703047 CEST	443	58848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.902955055 CEST	443	58848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.903012991 CEST	443	58848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.903021097 CEST	58848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.903074026 CEST	58848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.905658007 CEST	58848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.905689001 CEST	443	58848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.905709028 CEST	58848	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.905715942 CEST	443	58848	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.909220934 CEST	58853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.909269094 CEST	443	58853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:43.909323931 CEST	58853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.909507990 CEST	58853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:43.909519911 CEST	443	58853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.347210884 CEST	443	58850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.347879887 CEST	58850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.347913980 CEST	443	58850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.348411083 CEST	58850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.348418951 CEST	443	58850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.376147032 CEST	443	58849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.376774073 CEST	58849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.376805067 CEST	443	58849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.377321959 CEST	58849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.377330065 CEST	443	58849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.428179979 CEST	443	58852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.428816080 CEST	58852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.428848982 CEST	443	58852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.429446936 CEST	58852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.429460049 CEST	443	58852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.441838026 CEST	443	58850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.442142963 CEST	443	58850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.442188978 CEST	443	58850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.442250967 CEST	58850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.442348003 CEST	58850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.442367077 CEST	443	58850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.442384005 CEST	58850	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.442389965 CEST	443	58850	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.445544004 CEST	58854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.445583105 CEST	443	58854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.445708990 CEST	58854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.445921898 CEST	58854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.445931911 CEST	443	58854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.452620983 CEST	443	58851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.453155994 CEST	58851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.453180075 CEST	443	58851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.453779936 CEST	58851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.453787088 CEST	443	58851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.478329897 CEST	443	58849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.478399992 CEST	443	58849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.478452921 CEST	58849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.478719950 CEST	58849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.478734970 CEST	443	58849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.478748083 CEST	58849	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.478753090 CEST	443	58849	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.482182026 CEST	58855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.482234001 CEST	443	58855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.482314110 CEST	58855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.482498884 CEST	58855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.482511044 CEST	443	58855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.519488096 CEST	443	58853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.520243883 CEST	58853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.520277023 CEST	443	58853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.520570040 CEST	58853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.520575047 CEST	443	58853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.523780107 CEST	443	58852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.523811102 CEST	443	58852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.523868084 CEST	443	58852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.523885012 CEST	58852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.523933887 CEST	58852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.524081945 CEST	58852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.524099112 CEST	443	58852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.524107933 CEST	58852	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.524113894 CEST	443	58852	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.527394056 CEST	58856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.527432919 CEST	443	58856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.527554989 CEST	58856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.527818918 CEST	58856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.527831078 CEST	443	58856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.552544117 CEST	443	58851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.553325891 CEST	443	58851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.553381920 CEST	58851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.553427935 CEST	58851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.553452015 CEST	443	58851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.553464890 CEST	58851	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.553469896 CEST	443	58851	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.556606054 CEST	58857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.556648016 CEST	443	58857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.556730032 CEST	58857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.556961060 CEST	58857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.556973934 CEST	443	58857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.614473104 CEST	443	58853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.614625931 CEST	443	58853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.614676952 CEST	58853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.615011930 CEST	58853	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.615029097 CEST	443	58853	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.618457079 CEST	58858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.618509054 CEST	443	58858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:44.620162010 CEST	58858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.620688915 CEST	58858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:44.620703936 CEST	443	58858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.269351959 CEST	443	58855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.269469976 CEST	443	58854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.270004034 CEST	58855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.270025015 CEST	443	58855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.270260096 CEST	58854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.270272970 CEST	443	58854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.270620108 CEST	443	58856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.270828962 CEST	58855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.270834923 CEST	443	58855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.270934105 CEST	58854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.270939112 CEST	443	58854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.271078110 CEST	58856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.271101952 CEST	443	58856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.271419048 CEST	58856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.271425009 CEST	443	58856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.366942883 CEST	443	58856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.367019892 CEST	443	58856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.367280006 CEST	58856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.367361069 CEST	58856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.367381096 CEST	443	58856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.367408991 CEST	58856	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.367414951 CEST	443	58856	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.368530989 CEST	443	58855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.368555069 CEST	443	58855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.368598938 CEST	443	58855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.368633986 CEST	58855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.368675947 CEST	58855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.368999958 CEST	58855	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.369019985 CEST	443	58855	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.370688915 CEST	58859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.370721102 CEST	443	58859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.370824099 CEST	58859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.371035099 CEST	58859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.371045113 CEST	443	58859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.371176958 CEST	58860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.371197939 CEST	443	58860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.371361017 CEST	58860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.371452093 CEST	58860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.371458054 CEST	443	58860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.371557951 CEST	443	58854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.371630907 CEST	443	58854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.371690989 CEST	58854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.371850014 CEST	58854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.371850014 CEST	58854	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.371865034 CEST	443	58854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.371876001 CEST	443	58854	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.373990059 CEST	58861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.374021053 CEST	443	58861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.374069929 CEST	58861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.374227047 CEST	58861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.374236107 CEST	443	58861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.442835093 CEST	443	58857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.443451881 CEST	58857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.443522930 CEST	443	58857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.443963051 CEST	58857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.443984985 CEST	443	58857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.748506069 CEST	443	58858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.749126911 CEST	58858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.749192953 CEST	443	58858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:45.749593019 CEST	58858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:45.749612093 CEST	443	58858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.007185936 CEST	443	58857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.007256031 CEST	443	58857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.007409096 CEST	58857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.007807016 CEST	58857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.007832050 CEST	443	58857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.007846117 CEST	58857	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.007853031 CEST	443	58857	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.012691975 CEST	58862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.012729883 CEST	443	58862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.013503075 CEST	58862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.013870955 CEST	58862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.013884068 CEST	443	58862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.101042032 CEST	443	58858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.102382898 CEST	443	58858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.102447033 CEST	443	58858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.102499962 CEST	58858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.102574110 CEST	58858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.102629900 CEST	58858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.102629900 CEST	58858	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.102678061 CEST	443	58858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.102690935 CEST	443	58858	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.105834961 CEST	58863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.105868101 CEST	443	58863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.105935097 CEST	58863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.106127024 CEST	58863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.106134892 CEST	443	58863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.183521986 CEST	443	58859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.184194088 CEST	58859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.184210062 CEST	443	58859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.184783936 CEST	58859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.184789896 CEST	443	58859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.186263084 CEST	443	58861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.186770916 CEST	58861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.186795950 CEST	443	58861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.186923027 CEST	443	58860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.187158108 CEST	58861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.187163115 CEST	443	58861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.187303066 CEST	58860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.187333107 CEST	443	58860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.187695980 CEST	58860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.187701941 CEST	443	58860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.279607058 CEST	443	58859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.279676914 CEST	443	58859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.279884100 CEST	58859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.280107975 CEST	58859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.280127048 CEST	443	58859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.280138016 CEST	58859	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.280144930 CEST	443	58859	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.283436060 CEST	443	58861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.283540964 CEST	443	58861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.283863068 CEST	58861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.284086943 CEST	58861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.284117937 CEST	443	58861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.284137011 CEST	58861	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.284145117 CEST	443	58861	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.284307957 CEST	58864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.284348965 CEST	443	58864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.284437895 CEST	58864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.284707069 CEST	58864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.284723997 CEST	443	58864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.286906958 CEST	58865	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.286957979 CEST	443	58865	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.287044048 CEST	58865	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.287184000 CEST	443	58860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.287261963 CEST	58865	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.287277937 CEST	443	58865	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.287683964 CEST	443	58860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.287754059 CEST	443	58860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.287775993 CEST	58860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.287806988 CEST	58860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.287888050 CEST	58860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.287898064 CEST	443	58860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.287909985 CEST	58860	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.287915945 CEST	443	58860	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.290321112 CEST	58866	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.290358067 CEST	443	58866	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.290431023 CEST	58866	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.290635109 CEST	58866	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.290654898 CEST	443	58866	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.645128012 CEST	443	58862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.645826101 CEST	58862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.645850897 CEST	443	58862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.646327972 CEST	58862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.646334887 CEST	443	58862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.728147030 CEST	443	58863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.728843927 CEST	58863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.728883028 CEST	443	58863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.729587078 CEST	58863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.729599953 CEST	443	58863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.740906000 CEST	443	58862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.741070032 CEST	443	58862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.741189957 CEST	58862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.741319895 CEST	58862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.741354942 CEST	443	58862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.741377115 CEST	58862	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.741384983 CEST	443	58862	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.745316982 CEST	58867	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.745361090 CEST	443	58867	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.745451927 CEST	58867	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.745616913 CEST	58867	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.745629072 CEST	443	58867	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.823468924 CEST	443	58863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.823617935 CEST	443	58863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.823671103 CEST	443	58863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.823692083 CEST	58863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.823750019 CEST	58863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.824142933 CEST	58863	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.824162006 CEST	443	58863	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.828213930 CEST	58868	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.828267097 CEST	443	58868	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.828352928 CEST	58868	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.828674078 CEST	58868	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.828690052 CEST	443	58868	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.893795013 CEST	443	58865	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.894332886 CEST	58865	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.894361019 CEST	443	58865	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.894882917 CEST	58865	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.894890070 CEST	443	58865	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.900804043 CEST	443	58864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.901288033 CEST	58864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.901314974 CEST	443	58864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.901834011 CEST	58864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.901839018 CEST	443	58864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.936579943 CEST	443	58866	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.937185049 CEST	58866	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.937216997 CEST	443	58866	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.937710047 CEST	58866	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.937719107 CEST	443	58866	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.989260912 CEST	443	58865	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.989334106 CEST	443	58865	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.989404917 CEST	58865	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.989787102 CEST	58865	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.989814043 CEST	443	58865	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.989829063 CEST	58865	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.989834070 CEST	443	58865	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.993546009 CEST	58869	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.993614912 CEST	443	58869	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.993696928 CEST	58869	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.993905067 CEST	58869	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.993921041 CEST	443	58869	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.996470928 CEST	443	58864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.996802092 CEST	443	58864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.996854067 CEST	58864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.996979952 CEST	58864	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.996998072 CEST	443	58864	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:46.999825001 CEST	58870	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:46.999885082 CEST	443	58870	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.000145912 CEST	58870	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.000310898 CEST	58870	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.000329971 CEST	443	58870	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.038204908 CEST	443	58866	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.038439035 CEST	443	58866	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.038499117 CEST	443	58866	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.038558960 CEST	58866	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.038645029 CEST	58866	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.038670063 CEST	443	58866	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.038681984 CEST	58866	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.038687944 CEST	443	58866	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.042027950 CEST	58871	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.042077065 CEST	443	58871	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.042141914 CEST	58871	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.042351007 CEST	58871	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.042366982 CEST	443	58871	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.419047117 CEST	443	58867	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.419684887 CEST	58867	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.419703007 CEST	443	58867	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.420165062 CEST	58867	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.420170069 CEST	443	58867	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.463964939 CEST	443	58868	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.464637995 CEST	58868	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.464673996 CEST	443	58868	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.465296984 CEST	58868	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.465308905 CEST	443	58868	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.518049002 CEST	443	58867	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.519212008 CEST	443	58867	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.519339085 CEST	58867	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.519756079 CEST	58867	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.519756079 CEST	58867	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.519772053 CEST	443	58867	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.519783974 CEST	443	58867	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.525340080 CEST	58872	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.525384903 CEST	443	58872	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.525444031 CEST	58872	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.525674105 CEST	58872	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.525686979 CEST	443	58872	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.564440966 CEST	443	58868	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.564479113 CEST	443	58868	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.564524889 CEST	443	58868	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.564642906 CEST	58868	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.565224886 CEST	58868	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.565247059 CEST	443	58868	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.565264940 CEST	58868	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.565270901 CEST	443	58868	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.569029093 CEST	58873	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.569051981 CEST	443	58873	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.569226980 CEST	58873	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.569379091 CEST	58873	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.569391012 CEST	443	58873	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.621068954 CEST	443	58870	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.622056007 CEST	58870	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.622087002 CEST	443	58870	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.622961998 CEST	58870	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.622973919 CEST	443	58870	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.639945030 CEST	443	58869	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.641304016 CEST	58869	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.641320944 CEST	443	58869	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.642642975 CEST	58869	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.642647982 CEST	443	58869	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.663641930 CEST	443	58871	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.664582014 CEST	58871	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.664609909 CEST	443	58871	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.665216923 CEST	58871	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.665227890 CEST	443	58871	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.720067024 CEST	443	58870	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.720144033 CEST	443	58870	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.720232964 CEST	58870	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.743781090 CEST	443	58869	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.743910074 CEST	443	58869	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.744054079 CEST	58869	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.753499031 CEST	58870	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.753534079 CEST	443	58870	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.753599882 CEST	58870	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.753607988 CEST	443	58870	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.755949974 CEST	58869	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.755974054 CEST	443	58869	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.760721922 CEST	58874	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.760772943 CEST	443	58874	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.760844946 CEST	58874	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.761184931 CEST	443	58871	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.761512995 CEST	443	58871	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.761588097 CEST	58871	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.762567043 CEST	58875	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.762607098 CEST	443	58875	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.762770891 CEST	58875	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.762948036 CEST	58874	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.762967110 CEST	443	58874	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.763302088 CEST	58871	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.763329029 CEST	443	58871	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.765094995 CEST	58875	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.765114069 CEST	443	58875	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.766720057 CEST	58876	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.766772985 CEST	443	58876	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:47.767000914 CEST	58876	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.767234087 CEST	58876	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:47.767251968 CEST	443	58876	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.160886049 CEST	443	58872	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.162084103 CEST	58872	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.162106037 CEST	443	58872	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.163043022 CEST	58872	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.163054943 CEST	443	58872	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.178844929 CEST	443	58873	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.179672956 CEST	58873	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.179702997 CEST	443	58873	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.180538893 CEST	58873	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.180545092 CEST	443	58873	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.260108948 CEST	443	58872	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.260544062 CEST	443	58872	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.260607004 CEST	443	58872	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.260606050 CEST	58872	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.260670900 CEST	58872	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.260792017 CEST	58872	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.260819912 CEST	443	58872	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.260827065 CEST	58872	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.260833025 CEST	443	58872	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.266066074 CEST	58877	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.266102076 CEST	443	58877	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.266303062 CEST	58877	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.266541958 CEST	58877	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.266552925 CEST	443	58877	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.274166107 CEST	443	58873	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.274593115 CEST	443	58873	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.274729013 CEST	58873	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.274993896 CEST	58873	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.275017023 CEST	443	58873	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.275022984 CEST	58873	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.275028944 CEST	443	58873	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.286421061 CEST	58878	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.286464930 CEST	443	58878	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.286674023 CEST	58878	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.286956072 CEST	58878	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.286977053 CEST	443	58878	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.392908096 CEST	443	58875	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.393676996 CEST	58875	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.393707991 CEST	443	58875	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.394855976 CEST	58875	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.394869089 CEST	443	58875	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.398639917 CEST	443	58874	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.399672031 CEST	58874	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.399698019 CEST	443	58874	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.400660038 CEST	58874	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.400676966 CEST	443	58874	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.421612024 CEST	443	58876	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.429814100 CEST	58876	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.429856062 CEST	443	58876	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.431348085 CEST	58876	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.431365967 CEST	443	58876	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.494026899 CEST	443	58875	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.494091034 CEST	443	58875	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.494134903 CEST	58875	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.494163036 CEST	443	58875	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.494185925 CEST	443	58875	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.494230986 CEST	58875	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.494357109 CEST	58875	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.494376898 CEST	443	58875	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.494388103 CEST	58875	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.494394064 CEST	443	58875	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.500344992 CEST	58879	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.500399113 CEST	443	58879	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.500477076 CEST	58879	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.500689030 CEST	443	58874	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.500984907 CEST	58879	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.500999928 CEST	443	58879	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.502043962 CEST	443	58874	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.502109051 CEST	58874	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.502229929 CEST	58874	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.502250910 CEST	443	58874	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.502264023 CEST	58874	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.502269983 CEST	443	58874	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.509885073 CEST	58880	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.509946108 CEST	443	58880	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.510011911 CEST	58880	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.510344028 CEST	58880	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.510356903 CEST	443	58880	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.599615097 CEST	443	58876	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.599936962 CEST	443	58876	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.599984884 CEST	58876	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.599992990 CEST	443	58876	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.600060940 CEST	58876	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.600220919 CEST	58876	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.600246906 CEST	443	58876	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.600260973 CEST	58876	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.600266933 CEST	443	58876	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.605046988 CEST	58881	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.605083942 CEST	443	58881	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:48.605146885 CEST	58881	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.605422020 CEST	58881	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:48.605436087 CEST	443	58881	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.103733063 CEST	443	58878	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.105684042 CEST	443	58877	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.116689920 CEST	58878	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.116710901 CEST	443	58878	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.118388891 CEST	58878	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.118395090 CEST	443	58878	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.119338036 CEST	58877	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.119344950 CEST	443	58877	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.120323896 CEST	58877	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.120331049 CEST	443	58877	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.222076893 CEST	443	58878	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.222517014 CEST	443	58878	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.222575903 CEST	58878	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.222620964 CEST	58878	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.222620964 CEST	58878	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.222642899 CEST	443	58878	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.222656012 CEST	443	58878	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.224283934 CEST	443	58877	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.224510908 CEST	443	58877	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.224555969 CEST	58877	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.227525949 CEST	58877	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.227531910 CEST	443	58877	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.227545023 CEST	58877	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.227550030 CEST	443	58877	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.234761953 CEST	58882	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.234796047 CEST	443	58882	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.234855890 CEST	58882	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.235831022 CEST	58882	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.235842943 CEST	443	58882	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.239707947 CEST	58883	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.239734888 CEST	443	58883	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.239790916 CEST	58883	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.240151882 CEST	58883	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.240159988 CEST	443	58883	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.310789108 CEST	443	58879	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.311979055 CEST	58879	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.312051058 CEST	443	58879	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.313251972 CEST	58879	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.313267946 CEST	443	58879	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.325005054 CEST	443	58880	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.326164007 CEST	58880	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.326205969 CEST	443	58880	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.327469110 CEST	58880	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.327485085 CEST	443	58880	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.402307987 CEST	443	58881	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.406092882 CEST	58881	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.406117916 CEST	443	58881	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.407017946 CEST	58881	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.407022953 CEST	443	58881	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.412322998 CEST	443	58879	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.413057089 CEST	443	58879	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.413136959 CEST	58879	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.413254976 CEST	58879	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.413254976 CEST	58879	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.413309097 CEST	443	58879	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.413337946 CEST	443	58879	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.427407980 CEST	443	58880	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.427433968 CEST	443	58880	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.427496910 CEST	443	58880	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.427654028 CEST	58880	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.429486036 CEST	58880	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.442589998 CEST	58880	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.442589998 CEST	58884	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.442646027 CEST	443	58880	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.442651033 CEST	443	58884	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.442739010 CEST	58884	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.444746971 CEST	58884	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.444772005 CEST	443	58884	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.446971893 CEST	58885	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.447026014 CEST	443	58885	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.448862076 CEST	58885	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.449156046 CEST	58885	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.449173927 CEST	443	58885	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.500607967 CEST	443	58881	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.500684023 CEST	443	58881	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.500922918 CEST	58881	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.501171112 CEST	58881	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.501171112 CEST	58881	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.501189947 CEST	443	58881	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.501202106 CEST	443	58881	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.506638050 CEST	58886	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.506685019 CEST	443	58886	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.509047031 CEST	58886	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.512747049 CEST	58886	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.512769938 CEST	443	58886	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.843373060 CEST	443	58882	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.846103907 CEST	58882	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.846112013 CEST	443	58882	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.848743916 CEST	58882	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.848751068 CEST	443	58882	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.864547014 CEST	443	58883	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.865912914 CEST	58883	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.865912914 CEST	58883	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.865936041 CEST	443	58883	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.865951061 CEST	443	58883	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.940057039 CEST	443	58882	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.940138102 CEST	443	58882	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.940433979 CEST	58882	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.940709114 CEST	58882	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.940709114 CEST	58882	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.940736055 CEST	443	58882	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.940743923 CEST	443	58882	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.947623014 CEST	58887	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.947710991 CEST	443	58887	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.947943926 CEST	58887	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.949455976 CEST	58887	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.949490070 CEST	443	58887	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.963459969 CEST	443	58883	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.963527918 CEST	443	58883	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.963745117 CEST	58883	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.964015961 CEST	58883	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.964015961 CEST	58883	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.964035988 CEST	443	58883	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.964044094 CEST	443	58883	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.971461058 CEST	58888	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.971507072 CEST	443	58888	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:49.975496054 CEST	58888	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.975496054 CEST	58888	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:49.975536108 CEST	443	58888	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.052510977 CEST	443	58884	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.053677082 CEST	58884	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.053677082 CEST	58884	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.053720951 CEST	443	58884	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.053740978 CEST	443	58884	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.070133924 CEST	443	58885	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.071233034 CEST	58885	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.071233034 CEST	58885	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.071260929 CEST	443	58885	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.071278095 CEST	443	58885	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.149056911 CEST	443	58886	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.149636984 CEST	58886	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.149658918 CEST	443	58886	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.150149107 CEST	58886	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.150154114 CEST	443	58886	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.219885111 CEST	443	58884	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.219965935 CEST	443	58884	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.220262051 CEST	58884	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.220357895 CEST	58884	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.220359087 CEST	58884	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.220412016 CEST	443	58884	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.220449924 CEST	443	58884	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.223543882 CEST	58889	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.223582983 CEST	443	58889	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.223826885 CEST	58889	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.223826885 CEST	58889	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.223869085 CEST	443	58889	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.228167057 CEST	443	58885	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.228235960 CEST	443	58885	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.228425980 CEST	58885	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.228461981 CEST	58885	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.228461981 CEST	58885	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.228478909 CEST	443	58885	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.228488922 CEST	443	58885	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.230735064 CEST	58890	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.230761051 CEST	443	58890	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.230992079 CEST	58890	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.230992079 CEST	58890	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.231014967 CEST	443	58890	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.246627092 CEST	443	58886	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.246702909 CEST	443	58886	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.246984005 CEST	58886	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.246984005 CEST	58886	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.248389959 CEST	58886	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.248406887 CEST	443	58886	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.249604940 CEST	58891	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.249649048 CEST	443	58891	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.249887943 CEST	58891	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.249887943 CEST	58891	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.249922991 CEST	443	58891	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.598985910 CEST	443	58887	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.600052118 CEST	58887	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.600080967 CEST	443	58887	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.601236105 CEST	58887	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.601248980 CEST	443	58887	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.641360044 CEST	443	58888	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.642716885 CEST	58888	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.642738104 CEST	443	58888	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.643891096 CEST	58888	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.643898010 CEST	443	58888	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.698441982 CEST	443	58887	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.699023008 CEST	443	58887	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.699100971 CEST	58887	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.699451923 CEST	58887	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.699512005 CEST	58887	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.699520111 CEST	443	58887	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.699529886 CEST	443	58887	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.707292080 CEST	58892	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.707326889 CEST	443	58892	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.707406998 CEST	58892	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.707905054 CEST	58892	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.707917929 CEST	443	58892	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.737113953 CEST	443	58888	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.737449884 CEST	443	58888	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.737497091 CEST	58888	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.737500906 CEST	443	58888	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.737548113 CEST	58888	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.737998962 CEST	58888	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.738018990 CEST	443	58888	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.745059967 CEST	58893	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.745110989 CEST	443	58893	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.745188951 CEST	58893	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.745614052 CEST	58893	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.745624065 CEST	443	58893	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.849684954 CEST	443	58889	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.850893974 CEST	58889	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.850914001 CEST	443	58889	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.851907015 CEST	58889	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.851913929 CEST	443	58889	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.878825903 CEST	443	58890	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.879707098 CEST	58890	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.879724979 CEST	443	58890	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.881166935 CEST	58890	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.881171942 CEST	443	58890	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.894498110 CEST	443	58891	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.896032095 CEST	58891	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.896050930 CEST	443	58891	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.897329092 CEST	58891	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.897341013 CEST	443	58891	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.950628042 CEST	443	58889	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.950716019 CEST	443	58889	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.950774908 CEST	58889	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.974433899 CEST	58889	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.974457979 CEST	443	58889	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.974471092 CEST	58889	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.974476099 CEST	443	58889	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.983931065 CEST	58894	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.984019041 CEST	443	58894	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:50.984095097 CEST	58894	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.985876083 CEST	58894	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:50.985908985 CEST	443	58894	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.003540993 CEST	443	58890	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.003575087 CEST	443	58890	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.003627062 CEST	443	58890	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.003642082 CEST	58890	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.003693104 CEST	58890	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.004826069 CEST	58890	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.004837036 CEST	443	58890	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.004846096 CEST	58890	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.004851103 CEST	443	58890	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.005302906 CEST	443	58891	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.005363941 CEST	443	58891	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.005407095 CEST	58891	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.005738974 CEST	58891	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.005759001 CEST	443	58891	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.005769968 CEST	58891	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.005775928 CEST	443	58891	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.016724110 CEST	58895	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.016761065 CEST	443	58895	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.016830921 CEST	58895	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.018775940 CEST	58895	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.018802881 CEST	443	58895	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.022005081 CEST	58896	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.022034883 CEST	443	58896	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.022097111 CEST	58896	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.022368908 CEST	58896	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.022386074 CEST	443	58896	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.400609970 CEST	443	58893	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.401421070 CEST	58893	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.401456118 CEST	443	58893	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.402133942 CEST	58893	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.402149916 CEST	443	58893	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.418060064 CEST	443	58892	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.431598902 CEST	58892	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.431617975 CEST	443	58892	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.434139013 CEST	58892	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.434144020 CEST	443	58892	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.497585058 CEST	443	58893	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.498121023 CEST	443	58893	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.499041080 CEST	58893	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.506680965 CEST	58893	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.506681919 CEST	58893	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.506724119 CEST	443	58893	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.506736994 CEST	443	58893	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.514795065 CEST	58897	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.514842987 CEST	443	58897	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.514940023 CEST	58897	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.516730070 CEST	58897	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.516745090 CEST	443	58897	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.533795118 CEST	443	58892	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.533830881 CEST	443	58892	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.533886909 CEST	443	58892	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.533916950 CEST	58892	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.534271955 CEST	58892	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.534295082 CEST	443	58892	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.534317017 CEST	58892	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.534317017 CEST	58892	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.534324884 CEST	443	58892	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.534331083 CEST	443	58892	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.537282944 CEST	58898	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.537328005 CEST	443	58898	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.537470102 CEST	58898	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.537636042 CEST	58898	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.537643909 CEST	443	58898	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.603446960 CEST	443	58894	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.604617119 CEST	58894	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.604617119 CEST	58894	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.604650974 CEST	443	58894	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.604664087 CEST	443	58894	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.660249949 CEST	443	58895	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.661303043 CEST	58895	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.661303043 CEST	58895	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.661324024 CEST	443	58895	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.661333084 CEST	443	58895	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.673954964 CEST	443	58896	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.674828053 CEST	58896	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.674828053 CEST	58896	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.674859047 CEST	443	58896	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.674864054 CEST	443	58896	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.698631048 CEST	443	58894	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.698697090 CEST	443	58894	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.699065924 CEST	58894	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.699065924 CEST	58894	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.699270010 CEST	58894	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.699297905 CEST	443	58894	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.702085972 CEST	58899	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.702121019 CEST	443	58899	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.702354908 CEST	58899	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.702447891 CEST	58899	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.702456951 CEST	443	58899	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.757283926 CEST	443	58895	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.757370949 CEST	443	58895	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.757677078 CEST	58895	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.757677078 CEST	58895	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.757788897 CEST	58895	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.757812977 CEST	443	58895	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.761069059 CEST	58900	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.761106968 CEST	443	58900	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.761372089 CEST	58900	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.761372089 CEST	58900	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.761414051 CEST	443	58900	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.772711992 CEST	443	58896	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.773461103 CEST	443	58896	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.773508072 CEST	443	58896	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.773566008 CEST	58896	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.773639917 CEST	58896	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.773660898 CEST	58896	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.773660898 CEST	58896	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.773678064 CEST	443	58896	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.773688078 CEST	443	58896	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.775758028 CEST	58901	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.775805950 CEST	443	58901	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:51.775976896 CEST	58901	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.775976896 CEST	58901	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:51.776010036 CEST	443	58901	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.153060913 CEST	443	58897	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.157636881 CEST	58897	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.157636881 CEST	58897	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.157655954 CEST	443	58897	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.157672882 CEST	443	58897	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.168538094 CEST	443	58898	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.169261932 CEST	58898	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.169261932 CEST	58898	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.169276953 CEST	443	58898	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.169287920 CEST	443	58898	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.250633001 CEST	443	58897	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.251420021 CEST	443	58897	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.252258062 CEST	58897	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.252346992 CEST	58897	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.252346992 CEST	58897	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.252394915 CEST	443	58897	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.252423048 CEST	443	58897	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.256722927 CEST	58902	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.256771088 CEST	443	58902	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.260921001 CEST	58902	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.260921955 CEST	58902	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.260972023 CEST	443	58902	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.264847994 CEST	443	58898	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.264919996 CEST	443	58898	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.268783092 CEST	58898	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.344969034 CEST	58898	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.344969988 CEST	58898	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.345066071 CEST	443	58898	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.345104933 CEST	443	58898	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.352993011 CEST	58903	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.353041887 CEST	443	58903	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.353843927 CEST	58903	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.354296923 CEST	58903	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.354309082 CEST	443	58903	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.367556095 CEST	443	58899	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.368451118 CEST	58899	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.368452072 CEST	58899	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.368468046 CEST	443	58899	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.368482113 CEST	443	58899	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.400968075 CEST	443	58900	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.401593924 CEST	58900	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.401606083 CEST	443	58900	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.402661085 CEST	443	58901	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.402700901 CEST	58900	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.402705908 CEST	443	58900	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.403103113 CEST	58901	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.403143883 CEST	443	58901	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.404725075 CEST	58901	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.404742956 CEST	443	58901	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.469588041 CEST	443	58899	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.469614029 CEST	443	58899	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.469661951 CEST	58899	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.469677925 CEST	443	58899	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.469715118 CEST	443	58899	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.469757080 CEST	58899	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.470293045 CEST	58899	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.470312119 CEST	443	58899	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.470323086 CEST	58899	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.470328093 CEST	443	58899	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.477005959 CEST	58904	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.477068901 CEST	443	58904	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.477130890 CEST	58904	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.477340937 CEST	58904	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.477355957 CEST	443	58904	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.498954058 CEST	443	58901	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.498977900 CEST	443	58901	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.499063969 CEST	58901	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.499103069 CEST	443	58901	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.499536037 CEST	58901	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.499561071 CEST	443	58901	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.499592066 CEST	58901	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.499713898 CEST	443	58901	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.499756098 CEST	443	58901	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.499794006 CEST	58901	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.503889084 CEST	58905	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.503926039 CEST	443	58905	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.504009962 CEST	58905	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.504338980 CEST	58905	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.504354954 CEST	443	58905	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.531793118 CEST	443	58900	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.531883001 CEST	443	58900	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.531951904 CEST	58900	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.670661926 CEST	58900	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.670695066 CEST	443	58900	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.670706987 CEST	58900	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.670713902 CEST	443	58900	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.675865889 CEST	58906	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.675911903 CEST	443	58906	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.675992966 CEST	58906	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.676151991 CEST	58906	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.676161051 CEST	443	58906	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.871691942 CEST	443	58902	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.918160915 CEST	58902	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.966162920 CEST	443	58903	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.995299101 CEST	58902	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.995337009 CEST	443	58902	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:52.996144056 CEST	58902	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:52.996159077 CEST	443	58902	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.000051975 CEST	58903	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.000075102 CEST	443	58903	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.000981092 CEST	58903	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.000988007 CEST	443	58903	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.088213921 CEST	443	58902	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.088248014 CEST	443	58902	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.088320971 CEST	58902	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.088385105 CEST	443	58902	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.088536978 CEST	443	58902	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.088591099 CEST	58902	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.088689089 CEST	58902	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.088715076 CEST	443	58902	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.088731050 CEST	58902	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.088740110 CEST	443	58902	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.091413975 CEST	443	58903	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.091439009 CEST	443	58903	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.091485977 CEST	58903	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.091495991 CEST	443	58903	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.092240095 CEST	443	58903	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.092288017 CEST	58903	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.092794895 CEST	58903	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.092807055 CEST	443	58903	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.092817068 CEST	58903	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.092822075 CEST	443	58903	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.093720913 CEST	58907	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.093770981 CEST	443	58907	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.093847990 CEST	58907	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.094105959 CEST	58907	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.094122887 CEST	443	58907	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.096191883 CEST	58908	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.096221924 CEST	443	58908	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.096288919 CEST	58908	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.096412897 CEST	58908	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.096429110 CEST	443	58908	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.106645107 CEST	443	58904	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.107259035 CEST	58904	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.107306957 CEST	443	58904	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.107789040 CEST	58904	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.107800961 CEST	443	58904	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.139822960 CEST	443	58905	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.140439987 CEST	58905	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.140464067 CEST	443	58905	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.140935898 CEST	58905	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.140944004 CEST	443	58905	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.223644018 CEST	443	58904	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.223669052 CEST	443	58904	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.223731995 CEST	58904	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.223766088 CEST	443	58904	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.223834991 CEST	443	58904	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.223881006 CEST	58904	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.224062920 CEST	58904	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.224080086 CEST	443	58904	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.224091053 CEST	58904	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.224097967 CEST	443	58904	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.228415012 CEST	58909	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.228460073 CEST	443	58909	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.228528976 CEST	58909	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.229007959 CEST	58909	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.229020119 CEST	443	58909	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.236882925 CEST	443	58905	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.236970901 CEST	443	58905	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.237023115 CEST	58905	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.237190008 CEST	58905	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.237211943 CEST	443	58905	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.237226009 CEST	58905	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.237231970 CEST	443	58905	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.244223118 CEST	58910	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.244262934 CEST	443	58910	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.244337082 CEST	58910	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.245033979 CEST	58910	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.245043039 CEST	443	58910	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.325315952 CEST	443	58906	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.325942993 CEST	58906	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.325963020 CEST	443	58906	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.326692104 CEST	58906	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.326702118 CEST	443	58906	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.425829887 CEST	443	58906	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.425904989 CEST	443	58906	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.425966024 CEST	58906	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.426254034 CEST	58906	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.426254988 CEST	58906	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.426274061 CEST	443	58906	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.426284075 CEST	443	58906	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.430047989 CEST	58911	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.430100918 CEST	443	58911	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.430278063 CEST	58911	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.430613041 CEST	58911	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.430632114 CEST	443	58911	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.743413925 CEST	443	58908	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.743993998 CEST	58908	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.744019032 CEST	443	58908	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.744503021 CEST	58908	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.744508982 CEST	443	58908	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.750066042 CEST	443	58907	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.750473022 CEST	58907	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.750503063 CEST	443	58907	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.750888109 CEST	58907	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.750894070 CEST	443	58907	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.841399908 CEST	443	58908	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.842384100 CEST	443	58908	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.842556953 CEST	58908	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.842601061 CEST	58908	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.842628956 CEST	443	58908	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.842643023 CEST	58908	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.842648029 CEST	443	58908	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.845369101 CEST	58912	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.845392942 CEST	443	58912	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.845484972 CEST	58912	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.845664024 CEST	58912	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.845676899 CEST	443	58912	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.850667000 CEST	443	58909	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.851082087 CEST	58909	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.851119995 CEST	443	58909	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.851608038 CEST	58909	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.851619005 CEST	443	58909	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.853091955 CEST	443	58907	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.853152990 CEST	443	58907	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.853199005 CEST	58907	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.853333950 CEST	58907	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.853367090 CEST	443	58907	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.853379965 CEST	58907	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.853387117 CEST	443	58907	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.855899096 CEST	58913	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.855941057 CEST	443	58913	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.856002092 CEST	58913	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.856133938 CEST	58913	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.856148958 CEST	443	58913	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.873250008 CEST	443	58910	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.873650074 CEST	58910	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.873675108 CEST	443	58910	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.874098063 CEST	58910	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.874110937 CEST	443	58910	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.948288918 CEST	443	58909	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.948318005 CEST	443	58909	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.948388100 CEST	443	58909	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.948395014 CEST	58909	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.948435068 CEST	58909	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.948697090 CEST	58909	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.948720932 CEST	443	58909	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.948735952 CEST	58909	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.948741913 CEST	443	58909	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.951911926 CEST	58914	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.951952934 CEST	443	58914	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.952025890 CEST	58914	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.952244043 CEST	58914	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.952259064 CEST	443	58914	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.972023010 CEST	443	58910	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.972059965 CEST	443	58910	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.972130060 CEST	443	58910	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.972140074 CEST	58910	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.972176075 CEST	58910	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.972398043 CEST	58910	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.972418070 CEST	443	58910	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.972430944 CEST	58910	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.972435951 CEST	443	58910	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.975317001 CEST	58915	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.975358963 CEST	443	58915	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:53.975415945 CEST	58915	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.975589037 CEST	58915	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:53.975606918 CEST	443	58915	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.060076952 CEST	443	58911	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.060671091 CEST	58911	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.060688972 CEST	443	58911	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.061228991 CEST	58911	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.061235905 CEST	443	58911	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.158730984 CEST	443	58911	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.158757925 CEST	443	58911	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.158773899 CEST	443	58911	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.158835888 CEST	58911	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.158855915 CEST	443	58911	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.158920050 CEST	58911	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.241664886 CEST	443	58911	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.241755962 CEST	443	58911	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.241765976 CEST	58911	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.241827965 CEST	58911	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.241918087 CEST	58911	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.241942883 CEST	443	58911	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.241955042 CEST	58911	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.241961002 CEST	443	58911	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.245511055 CEST	58916	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.245557070 CEST	443	58916	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.245708942 CEST	58916	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.245934963 CEST	58916	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.245950937 CEST	443	58916	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.417264938 CEST	443	58913	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.417876959 CEST	58913	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.417906046 CEST	443	58913	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.418490887 CEST	58913	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.418503046 CEST	443	58913	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.489321947 CEST	443	58912	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.490369081 CEST	58912	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.490369081 CEST	58912	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.490390062 CEST	443	58912	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.490410089 CEST	443	58912	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.530934095 CEST	443	58913	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.530955076 CEST	443	58913	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.530970097 CEST	443	58913	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.531105042 CEST	58913	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.531131983 CEST	443	58913	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.531280994 CEST	58913	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.585354090 CEST	443	58912	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.585378885 CEST	443	58912	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.585434914 CEST	443	58912	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.585500002 CEST	58912	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.585654974 CEST	58912	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.585798979 CEST	58912	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.585798979 CEST	58912	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.585823059 CEST	443	58912	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.585834026 CEST	443	58912	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.586154938 CEST	443	58914	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.586637974 CEST	58914	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.586664915 CEST	443	58914	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.587246895 CEST	443	58915	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.587287903 CEST	58914	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.587294102 CEST	443	58914	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.587578058 CEST	58915	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.587606907 CEST	443	58915	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.588820934 CEST	58915	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.588828087 CEST	443	58915	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.588985920 CEST	58917	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.589020014 CEST	443	58917	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.589221001 CEST	58917	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.589221001 CEST	58917	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.589251995 CEST	443	58917	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.609303951 CEST	443	58913	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.609363079 CEST	443	58913	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.609397888 CEST	443	58913	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.609452963 CEST	58913	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.609666109 CEST	58913	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.609666109 CEST	58913	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.609802008 CEST	58913	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.609814882 CEST	443	58913	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.617239952 CEST	58918	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.617279053 CEST	443	58918	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.617372036 CEST	58918	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.617623091 CEST	58918	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.617636919 CEST	443	58918	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.703313112 CEST	443	58914	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.703342915 CEST	443	58914	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.703732014 CEST	58914	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.703758001 CEST	443	58914	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.703882933 CEST	58914	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.703882933 CEST	58914	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.703891993 CEST	443	58914	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.703928947 CEST	58914	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.704082012 CEST	443	58914	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.704108953 CEST	443	58914	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.704255104 CEST	58914	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.704368114 CEST	443	58915	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.704390049 CEST	443	58915	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.704694986 CEST	58915	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.704716921 CEST	443	58915	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.704828978 CEST	443	58915	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.704922915 CEST	58915	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.704922915 CEST	58915	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.707412958 CEST	58915	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.707446098 CEST	443	58915	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.707490921 CEST	58920	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.707495928 CEST	58919	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.707535982 CEST	443	58920	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.707547903 CEST	443	58919	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.707637072 CEST	58919	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.707640886 CEST	58920	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.707843065 CEST	58919	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.707849026 CEST	58920	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.707856894 CEST	443	58919	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.707863092 CEST	443	58920	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.893307924 CEST	443	58916	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.894336939 CEST	58916	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.894336939 CEST	58916	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.894368887 CEST	443	58916	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.894387007 CEST	443	58916	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.994556904 CEST	443	58916	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.995131016 CEST	443	58916	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.995237112 CEST	58916	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.995275021 CEST	58916	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.995275021 CEST	58916	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.995292902 CEST	443	58916	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.995306015 CEST	443	58916	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.998272896 CEST	58921	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.998311043 CEST	443	58921	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:54.998497963 CEST	58921	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.998497963 CEST	58921	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:54.998533964 CEST	443	58921	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.230031967 CEST	443	58917	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.231034040 CEST	58917	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.231061935 CEST	443	58917	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.231309891 CEST	58917	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.231317043 CEST	443	58917	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.240423918 CEST	443	58918	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.241554022 CEST	58918	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.241554022 CEST	58918	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.241571903 CEST	443	58918	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.241588116 CEST	443	58918	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.332292080 CEST	443	58917	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.332750082 CEST	443	58917	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.332858086 CEST	58917	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.332858086 CEST	58917	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.332983017 CEST	58917	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.332999945 CEST	443	58917	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.335918903 CEST	58922	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.335961103 CEST	443	58922	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.336522102 CEST	58922	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.336523056 CEST	58922	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.336559057 CEST	443	58922	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.337434053 CEST	443	58918	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.337595940 CEST	443	58918	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.337721109 CEST	58918	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.337722063 CEST	58918	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.338079929 CEST	58918	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.338084936 CEST	443	58918	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.339200020 CEST	443	58919	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.340154886 CEST	58919	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.340154886 CEST	58919	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.340179920 CEST	443	58919	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.340195894 CEST	443	58919	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.341193914 CEST	58923	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.341224909 CEST	443	58923	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.342281103 CEST	443	58920	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.342904091 CEST	58923	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.342998981 CEST	58923	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.342998981 CEST	58920	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.343008995 CEST	443	58923	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.343018055 CEST	443	58920	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.343405008 CEST	58920	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.343410969 CEST	443	58920	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.439996958 CEST	443	58919	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.440077066 CEST	443	58919	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.440130949 CEST	58919	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.440530062 CEST	58919	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.440530062 CEST	58919	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.440553904 CEST	443	58919	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.440570116 CEST	443	58919	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.443638086 CEST	443	58920	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.443826914 CEST	58924	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.443876982 CEST	443	58924	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.444034100 CEST	58924	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.444044113 CEST	443	58920	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.444099903 CEST	443	58920	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.444103003 CEST	58920	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.444152117 CEST	58920	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.444190025 CEST	58920	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.444190025 CEST	58920	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.444204092 CEST	443	58920	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.444214106 CEST	443	58920	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.444345951 CEST	58924	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.444360971 CEST	443	58924	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.641272068 CEST	443	58921	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.642477989 CEST	58921	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.642517090 CEST	443	58921	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.647130966 CEST	58921	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.647140026 CEST	443	58921	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.742706060 CEST	443	58921	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.742789984 CEST	443	58921	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.743026018 CEST	58921	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.743118048 CEST	58921	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.743134975 CEST	443	58921	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.743149042 CEST	58921	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.743155956 CEST	443	58921	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.945179939 CEST	443	58922	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.945828915 CEST	58922	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.945849895 CEST	443	58922	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.946326017 CEST	58922	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.946331978 CEST	443	58922	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.970613003 CEST	443	58923	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.971792936 CEST	58923	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.971810102 CEST	443	58923	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:55.972562075 CEST	58923	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:55.972568035 CEST	443	58923	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.300421953 CEST	443	58922	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.300488949 CEST	443	58922	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.300859928 CEST	443	58923	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.300887108 CEST	58922	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:56.300932884 CEST	443	58923	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.301008940 CEST	58923	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:56.301064014 CEST	58922	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:56.301086903 CEST	443	58922	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.301100016 CEST	58922	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:56.301105976 CEST	443	58922	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.302515030 CEST	443	58924	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.302835941 CEST	58923	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:56.302851915 CEST	443	58923	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.302922964 CEST	58923	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:56.302930117 CEST	443	58923	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.305053949 CEST	58924	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:56.305068016 CEST	443	58924	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.306647062 CEST	58924	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:56.306653976 CEST	443	58924	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.404025078 CEST	443	58924	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.404115915 CEST	443	58924	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:56.404221058 CEST	58924	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:56.404788017 CEST	58924	443	192.168.2.10	13.107.246.60
Oct 7, 2024 18:02:56.404803038 CEST	443	58924	13.107.246.60	192.168.2.10
Oct 7, 2024 18:02:57.222492933 CEST	54695	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:57.227482080 CEST	53	54695	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:57.227560997 CEST	54695	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:57.227602959 CEST	54695	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:57.232527971 CEST	53	54695	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:57.708024979 CEST	53	54695	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:57.710319042 CEST	54695	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:57.716175079 CEST	53	54695	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:57.716494083 CEST	54695	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:03:01.328665972 CEST	49747	80	192.168.2.10	216.219.112.116
Oct 7, 2024 18:03:01.335001945 CEST	80	49747	216.219.112.116	192.168.2.10
Oct 7, 2024 18:03:02.089508057 CEST	49746	80	192.168.2.10	216.219.112.116
Oct 7, 2024 18:03:02.425379038 CEST	80	49746	216.219.112.116	192.168.2.10
Oct 7, 2024 18:03:16.468523026 CEST	49747	80	192.168.2.10	216.219.112.116
Oct 7, 2024 18:03:16.474446058 CEST	80	49747	216.219.112.116	192.168.2.10
Oct 7, 2024 18:03:16.474509001 CEST	49747	80	192.168.2.10	216.219.112.116
Oct 7, 2024 18:03:18.599864960 CEST	54699	443	192.168.2.10	216.58.212.132
Oct 7, 2024 18:03:18.599903107 CEST	443	54699	216.58.212.132	192.168.2.10
Oct 7, 2024 18:03:18.599984884 CEST	54699	443	192.168.2.10	216.58.212.132
Oct 7, 2024 18:03:18.600280046 CEST	54699	443	192.168.2.10	216.58.212.132
Oct 7, 2024 18:03:18.600291014 CEST	443	54699	216.58.212.132	192.168.2.10
Oct 7, 2024 18:03:19.201118946 CEST	443	54699	216.58.212.132	192.168.2.10
Oct 7, 2024 18:03:19.201458931 CEST	54699	443	192.168.2.10	216.58.212.132
Oct 7, 2024 18:03:19.201473951 CEST	443	54699	216.58.212.132	192.168.2.10
Oct 7, 2024 18:03:19.201812029 CEST	443	54699	216.58.212.132	192.168.2.10
Oct 7, 2024 18:03:19.202198982 CEST	54699	443	192.168.2.10	216.58.212.132
Oct 7, 2024 18:03:19.202263117 CEST	443	54699	216.58.212.132	192.168.2.10
Oct 7, 2024 18:03:19.246443987 CEST	54699	443	192.168.2.10	216.58.212.132
Oct 7, 2024 18:03:22.087300062 CEST	80	49746	216.219.112.116	192.168.2.10
Oct 7, 2024 18:03:22.087371111 CEST	49746	80	192.168.2.10	216.219.112.116
Oct 7, 2024 18:03:22.561075926 CEST	49746	80	192.168.2.10	216.219.112.116
Oct 7, 2024 18:03:22.566489935 CEST	80	49746	216.219.112.116	192.168.2.10
Oct 7, 2024 18:03:29.118802071 CEST	443	54699	216.58.212.132	192.168.2.10
Oct 7, 2024 18:03:29.118876934 CEST	443	54699	216.58.212.132	192.168.2.10
Oct 7, 2024 18:03:29.119224072 CEST	54699	443	192.168.2.10	216.58.212.132
Oct 7, 2024 18:03:30.466752052 CEST	54699	443	192.168.2.10	216.58.212.132
Oct 7, 2024 18:03:30.466790915 CEST	443	54699	216.58.212.132	192.168.2.10

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 18:02:14.089848042 CEST	53	58124	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:14.229657888 CEST	53	50065	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:16.003484964 CEST	53	57934	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:16.285099983 CEST	56275	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:16.285659075 CEST	59051	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:16.294986010 CEST	53	56275	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:16.304014921 CEST	53	59051	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:17.159763098 CEST	53820	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:17.159976006 CEST	65509	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:17.166904926 CEST	53	53820	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:17.172003031 CEST	53	65509	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:18.566247940 CEST	55514	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:18.569129944 CEST	55159	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:18.573515892 CEST	53	55514	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:18.576380014 CEST	53	55159	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:19.220283031 CEST	53797	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:19.221292973 CEST	52524	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:19.240200043 CEST	53	52524	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:20.409493923 CEST	56643	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:20.409933090 CEST	55561	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:33.238877058 CEST	53	64644	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:36.837210894 CEST	53	58590	162.159.36.2	192.168.2.10
Oct 7, 2024 18:02:37.319942951 CEST	54569	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:02:37.339642048 CEST	53	54569	1.1.1.1	192.168.2.10
Oct 7, 2024 18:02:57.221971035 CEST	53	55313	1.1.1.1	192.168.2.10
Oct 7, 2024 18:03:00.480715036 CEST	138	138	192.168.2.10	192.168.2.255
Oct 7, 2024 18:03:18.591406107 CEST	58006	53	192.168.2.10	1.1.1.1
Oct 7, 2024 18:03:18.598571062 CEST	53	58006	1.1.1.1	192.168.2.10

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 7, 2024 18:02:20.560847044 CEST	192.168.2.10	1.1.1.1	c276	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 18:02:16.285099983 CEST	192.168.2.10	1.1.1.1	0x431a	Standard query (0)	userer.gotoassist.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:02:16.285659075 CEST	192.168.2.10	1.1.1.1	0xd79a	Standard query (0)	userer.gotoassist.com	65	IN (0x0001)	false
Oct 7, 2024 18:02:17.159763098 CEST	192.168.2.10	1.1.1.1	0xad0b	Standard query (0)	www.gotoassist.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:02:17.159976006 CEST	192.168.2.10	1.1.1.1	0x9470	Standard query (0)	www.gotoassist.com	65	IN (0x0001)	false
Oct 7, 2024 18:02:18.566247940 CEST	192.168.2.10	1.1.1.1	0x16eb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:02:18.569129944 CEST	192.168.2.10	1.1.1.1	0x475a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 18:02:19.220283031 CEST	192.168.2.10	1.1.1.1	0x5c0b	Standard query (0)	get.gotoassist.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:02:19.221292973 CEST	192.168.2.10	1.1.1.1	0x4dc4	Standard query (0)	get.gotoassist.com	65	IN (0x0001)	false
Oct 7, 2024 18:02:20.409493923 CEST	192.168.2.10	1.1.1.1	0x1831	Standard query (0)	www.goto.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:02:20.409933090 CEST	192.168.2.10	1.1.1.1	0x3894	Standard query (0)	www.goto.com	65	IN (0x0001)	false
Oct 7, 2024 18:02:37.319942951 CEST	192.168.2.10	1.1.1.1	0x2a9b	Standard query (0)	198.187.3.20.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 7, 2024 18:03:18.591406107 CEST	192.168.2.10	1.1.1.1	0x5d4f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 18:02:04.117701054 CEST	1.1.1.1	192.168.2.10	0xfcb9	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:02:04.117701054 CEST	1.1.1.1	192.168.2.10	0xfcb9	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:02:16.294986010 CEST	1.1.1.1	192.168.2.10	0x431a	No error (0)	userer.gotoassist.com		216.219.112.116	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:02:17.166904926 CEST	1.1.1.1	192.168.2.10	0xad0b	No error (0)	www.gotoassist.com		216.219.112.176	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:02:18.573515892 CEST	1.1.1.1	192.168.2.10	0x16eb	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:02:18.576380014 CEST	1.1.1.1	192.168.2.10	0x475a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 18:02:19.240200043 CEST	1.1.1.1	192.168.2.10	0x4dc4	No error (0)	get.gotoassist.com	get-gotoassist-com.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:02:19.270261049 CEST	1.1.1.1	192.168.2.10	0x5c0b	No error (0)	get.gotoassist.com	get-gotoassist-com.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:02:20.417869091 CEST	1.1.1.1	192.168.2.10	0x1831	No error (0)	www.goto.com	wildcard-san.logmein.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:02:20.560755014 CEST	1.1.1.1	192.168.2.10	0x3894	No error (0)	www.goto.com	wildcard-san.logmein.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:02:23.144671917 CEST	1.1.1.1	192.168.2.10	0xaeb8	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:02:23.144671917 CEST	1.1.1.1	192.168.2.10	0xaeb8	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:02:37.339642048 CEST	1.1.1.1	192.168.2.10	0x2a9b	Name error (3)	198.187.3.20.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 7, 2024 18:03:18.598571062 CEST	1.1.1.1	192.168.2.10	0x5d4f	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

otelrules.azureedge.net

fs.microsoft.com

userer.gotoassist.com

www.gotoassist.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49746	216.219.112.116	80	3936	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 18:02:16.309858084 CEST	436	OUT	GET / HTTP/1.1 Host: userer.gotoassist.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 18:02:17.087204933 CEST	410	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 07 Oct 2024 16:02:17 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 209 Connection: keep-alive Location: http://www.gotoassist.com Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 74 6f 61 73 73 69 73 74 2e 63 6f 6d 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="http://www.gotoassist.com">here</a>.</p></body></html>
Oct 7, 2024 18:03:02.089508057 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49750	216.219.112.176	80	3936	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 18:02:17.178987980 CEST	433	OUT	GET / HTTP/1.1 Host: www.gotoassist.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 18:02:18.565229893 CEST	628	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 07 Oct 2024 16:02:18 GMT Server: Apache Location: http://www.gotoassist.com/remote_support/ Content-Length: 365 Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 74 6f 61 73 73 69 73 74 2e 63 6f 6d 2f 72 65 6d 6f 74 65 5f 73 75 70 70 6f 72 74 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 77 65 62 6d 61 73 74 65 72 40 63 69 74 72 69 78 6f 6e 6c 69 6e 65 2e 63 6f 6d 22 3e 77 77 77 2e 67 6f 74 6f 61 73 73 69 73 74 2e 63 6f 6d 3c 2f 61 3e 20 50 6f 72 74 20 38 [TRUNCATED] Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.gotoassist.com/remote_support/">here</a>.</p><hr><address>Apache Server at <a href="mailto:webmaster@citrixonline.com">www.gotoassist.com</a> Port 80</address></body></html>
Oct 7, 2024 18:02:18.785511017 CEST	448	OUT	GET /remote_support/ HTTP/1.1 Host: www.gotoassist.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 7, 2024 18:02:18.964889050 CEST	563	IN	HTTP/1.1 302 Found Date: Mon, 07 Oct 2024 16:02:18 GMT Server: Apache Location: https://get.gotoassist.com/ Content-Length: 327 Keep-Alive: timeout=15, max=99 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 65 74 2e 67 6f 74 6f 61 73 73 69 73 74 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 77 65 62 6d 61 73 74 65 72 40 63 69 74 72 69 78 6f 6e 6c 69 6e 65 2e 63 6f 6d 22 3e 77 77 77 2e 67 6f 74 6f 61 73 73 69 73 74 2e 63 6f 6d 3c 2f 61 3e 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://get.gotoassist.com/">here</a>.</p><hr><address>Apache Server at <a href="mailto:webmaster@citrixonline.com">www.gotoassist.com</a> Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49747	216.219.112.116	80	3936	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 18:03:01.328665972 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.10	49701	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:04 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:04 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:04 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160204Z-1657d5bbd48sqtlf1huhzuwq7000000003cg00000000rgvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:04 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-07 16:02:05 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-07 16:02:05 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-07 16:02:05 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-07 16:02:05 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-07 16:02:05 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-07 16:02:05 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-07 16:02:05 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-07 16:02:05 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-07 16:02:05 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.10	49705	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:05 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:06 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:05 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c62b5fc1-401e-0067-3a60-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160205Z-1657d5bbd48lknvp09v995n7900000000370000000011ycw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:06 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.10	49706	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:05 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:06 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b27588a3-a01e-003d-6001-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160206Z-1657d5bbd48lknvp09v995n79000000003b000000000fcq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:06 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.10	49703	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:05 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:06 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:06 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160206Z-1657d5bbd48t66tjar5xuq22r800000003k0000000011ugh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:06 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.10	49704	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:06 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:06 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160206Z-1657d5bbd48lknvp09v995n79000000003dg000000003dn6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:06 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.10	49702	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:06 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:06 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:06 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160206Z-1657d5bbd482tlqpvyz9e93p5400000003r000000000tvpt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:06 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.10	49709	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:07 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160207Z-1657d5bbd48xlwdx82gahegw4000000003y000000000aahc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.10	49710	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:07 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:07 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160207Z-1657d5bbd48tqvfc1ysmtbdrg000000003kg00000000f2ps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:07 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.10	49708	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:07 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160207Z-1657d5bbd48brl8we3nu8cxwgn00000003x0000000011ymz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.10	49711	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:07 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:07 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160207Z-1657d5bbd48vhs7r2p1ky7cs5w000000042g000000006xv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:07 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.10	49707	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:07 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160207Z-1657d5bbd48jwrqbupe3ktsx9w00000003x000000000gahe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.10	49712	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:08 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160208Z-1657d5bbd48brl8we3nu8cxwgn000000041g00000000bmvh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:08 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.10	49713	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:08 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:08 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160208Z-1657d5bbd48vlsxxpe15ac3q7n00000003pg00000000ht03 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:08 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.10	49714	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:08 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160208Z-1657d5bbd487nf59mzf5b3gk8n00000003a000000000mehn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.10	49716	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:08 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160208Z-1657d5bbd48wd55zet5pcra0cg00000003r0000000009sup x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:08 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.10	49715	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:08 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:08 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160208Z-1657d5bbd48tnj6wmberkg2xy800000003wg000000000h86 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:08 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.10	49719	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:10 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:10 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160210Z-1657d5bbd48gqrfwecymhhbfm800000002f000000000suxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:10 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.10	49717	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:10 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160210Z-1657d5bbd48762wn1qw4s5sd3000000003m000000000c3cw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:10 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.10	49720	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:10 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:10 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160210Z-1657d5bbd48dfrdj7px744zp8s00000003gg000000006vag x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:10 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.10	49721	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:10 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:10 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160210Z-1657d5bbd48sdh4cyzadbb374800000003h000000000hdm9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:10 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.10	49718	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:10 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160210Z-1657d5bbd48t66tjar5xuq22r800000003ng00000000q0dz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.10	49725	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:13 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:13 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160213Z-1657d5bbd48q6t9vvmrkd293mg00000003s0000000005sym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:13 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.10	49723	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:13 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160213Z-1657d5bbd48q6t9vvmrkd293mg00000003ng00000000qhnc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.10	49724	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:13 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:13 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160213Z-1657d5bbd48xlwdx82gahegw4000000003yg000000007yxb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:13 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.10	49722	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:13 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160213Z-1657d5bbd48tnj6wmberkg2xy800000003rg00000000t2zm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.10	49726	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:13 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:13 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160213Z-1657d5bbd482lxwq1dp2t1zwkc00000003bg000000010sty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:13 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.10	49727	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:14 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:15 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160215Z-1657d5bbd48tqvfc1ysmtbdrg000000003g000000000um42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:15 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.10	49730	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:14 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:15 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160215Z-1657d5bbd48wd55zet5pcra0cg00000003pg00000000gers x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:15 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.10	49728	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:14 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160215Z-1657d5bbd482tlqpvyz9e93p5400000003p0000000012kvs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.10	49731	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:15 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:15 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 7c825ef0-601e-0001-5f02-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160215Z-1657d5bbd48tnj6wmberkg2xy800000003rg00000000t32r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:15 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.10	49729	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:15 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:15 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160215Z-1657d5bbd48qjg85buwfdynm5w00000003ug00000000c1tv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.10	49735	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:15 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:15 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 4c0632d0-601e-0097-4413-17f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160215Z-1657d5bbd48t66tjar5xuq22r800000003q000000000ew4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:16 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.10	49736	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:15 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160216Z-1657d5bbd48xdq5dkwwugdpzr0000000040g00000000gw5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.10	49737	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:16 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160216Z-1657d5bbd48jwrqbupe3ktsx9w00000003wg00000000mqrq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.10	49738	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:16 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160216Z-1657d5bbd48vlsxxpe15ac3q7n00000003p000000000mxwh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.10	49739	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:16 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:16 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160216Z-1657d5bbd482krtfgrg72dfbtn00000003gg000000006rwq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:17 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.10	49742	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:17 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:17 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160217Z-1657d5bbd48tnj6wmberkg2xy800000003w00000000036ug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:17 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.10	49743	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:17 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:17 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160217Z-1657d5bbd48jwrqbupe3ktsx9w00000003u0000000010091 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:17 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.10	49744	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:17 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160217Z-1657d5bbd48wd55zet5pcra0cg00000003hg000000010554 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.10	49745	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:17 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:17 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 11b227e2-601e-0002-7f6b-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160217Z-1657d5bbd48q6t9vvmrkd293mg00000003n000000000rfzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:17 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.10	49749	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:18 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:18 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1be548a6-001e-00a2-4166-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160218Z-1657d5bbd48xsz2nuzq4vfrzg800000003gg00000000rz8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:19 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.10	49753	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:19 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:19 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160219Z-1657d5bbd48lknvp09v995n79000000003e00000000012gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:19 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.10	49752	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:19 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:19 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160219Z-1657d5bbd482tlqpvyz9e93p5400000003p0000000012m19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:19 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.10	49751	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:19 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:19 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 678daa67-201e-00aa-3f60-173928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160219Z-1657d5bbd48dfrdj7px744zp8s00000003h0000000004pkr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:19 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.10	49754	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:19 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:19 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:19 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5e879109-c01e-00a2-3e73-172327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160219Z-1657d5bbd48gqrfwecymhhbfm800000002g000000000nga1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:19 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.10	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:19 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:20 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160220Z-1657d5bbd48xlwdx82gahegw4000000003z0000000005pf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:20 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.10	49760	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:20 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 04801829-801e-00ac-6301-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160220Z-1657d5bbd48sdh4cyzadbb374800000003n00000000047am x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.10	49759	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:20 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:20 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160220Z-1657d5bbd48cpbzgkvtewk0wu000000003pg000000011uy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:20 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.10	49762	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:20 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:20 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160220Z-1657d5bbd48brl8we3nu8cxwgn000000042g000000006q5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:20 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.10	49761	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:20 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:20 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160220Z-1657d5bbd48tnj6wmberkg2xy800000003w000000000370e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:20 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.10	49763	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:20 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:20 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160220Z-1657d5bbd48xlwdx82gahegw4000000003ug00000000w42e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:20 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.10	49766	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:20 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2d97bf78-001e-0066-1b9f-18561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160220Z-1657d5bbd48hzllksrq1r6zsvs00000000ug00000000yn7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:21 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.10	49765	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:20 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160221Z-1657d5bbd48762wn1qw4s5sd3000000003pg000000000dx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.10	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:21 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160221Z-1657d5bbd48jwrqbupe3ktsx9w00000003tg000000012hgh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.10	49767	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:21 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:21 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 46a5aa72-701e-0032-6004-17a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160221Z-1657d5bbd482krtfgrg72dfbtn00000003d000000000q02x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.10	49764	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:21 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 16:02:21 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=175424 Date: Mon, 07 Oct 2024 16:02:21 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.10	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:22 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:22 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160222Z-1657d5bbd48sqtlf1huhzuwq7000000003c000000000th41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:22 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.10	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:22 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:22 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160222Z-1657d5bbd48sdh4cyzadbb374800000003ng000000002842 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:22 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.10	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:22 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:22 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160222Z-1657d5bbd48762wn1qw4s5sd3000000003ng0000000054gz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:22 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.10	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:22 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160222Z-1657d5bbd48xlwdx82gahegw4000000003vg00000000qqy1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:22 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.10	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:22 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:22 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:22 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160222Z-1657d5bbd48sdh4cyzadbb374800000003fg00000000t0pg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:22 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.10	49775	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:22 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 16:02:22 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=175466 Date: Mon, 07 Oct 2024 16:02:22 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 16:02:22 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.10	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:23 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:23 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160223Z-1657d5bbd48sqtlf1huhzuwq7000000003b000000000yqwd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:23 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.10	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:23 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:23 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160223Z-1657d5bbd48xdq5dkwwugdpzr000000003z000000000sn9f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:23 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.10	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:23 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:23 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160223Z-1657d5bbd48t66tjar5xuq22r800000003kg000000010arz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:23 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.10	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:23 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:23 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160223Z-1657d5bbd48sqtlf1huhzuwq7000000003b000000000yqwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:23 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.10	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:23 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:23 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160223Z-1657d5bbd48xsz2nuzq4vfrzg800000003hg00000000mg0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:23 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.10	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:23 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160223Z-1657d5bbd48762wn1qw4s5sd3000000003fg000000010270 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.10	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:23 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:23 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: bfab55ab-401e-0015-6202-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160223Z-1657d5bbd48q6t9vvmrkd293mg00000003rg000000007s1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:23 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.10	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:23 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:23 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160223Z-1657d5bbd48sdh4cyzadbb374800000003ng00000000286p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:23 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.10	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:23 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:23 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:23 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160223Z-1657d5bbd48vlsxxpe15ac3q7n00000003sg000000004q9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:23 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.10	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:24 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160224Z-1657d5bbd48q6t9vvmrkd293mg00000003q000000000ffc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.10	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:24 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: f196d52c-b01e-0002-1604-171b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160224Z-1657d5bbd48t66tjar5xuq22r800000003m000000000wzqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.10	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:24 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:24 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160224Z-1657d5bbd48tqvfc1ysmtbdrg000000003eg000000011381 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:24 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.10	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:24 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160224Z-1657d5bbd48sqtlf1huhzuwq7000000003f000000000bcp6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.10	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:24 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:24 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb96d6a-f01e-003f-17e5-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160224Z-1657d5bbd48tqvfc1ysmtbdrg000000003h000000000p568 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:24 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.10	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:25 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:25 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160225Z-1657d5bbd4824mj9d6vp65b6n400000003w000000000n93z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:25 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.10	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:25 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:25 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:25 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160225Z-1657d5bbd48qjg85buwfdynm5w00000003w0000000004b1t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:25 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.10	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:25 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:25 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160225Z-1657d5bbd48762wn1qw4s5sd3000000003kg00000000exke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:25 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.10	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:25 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:25 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160225Z-1657d5bbd48jwrqbupe3ktsx9w000000040000000000209a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:25 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.10	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:25 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:25 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160225Z-1657d5bbd48q6t9vvmrkd293mg00000003p000000000m2e3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:25 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.10	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:25 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:25 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:25 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160225Z-1657d5bbd48762wn1qw4s5sd3000000003m000000000c4mc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:25 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.10	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:26 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:26 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160226Z-1657d5bbd48tqvfc1ysmtbdrg000000003n000000000734p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:26 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.10	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:26 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:26 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: b738acd5-401e-0067-1502-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160226Z-1657d5bbd48brl8we3nu8cxwgn00000003yg00000000uswh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:26 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.10	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:26 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:26 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 0480ed94-801e-00ac-5102-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160226Z-1657d5bbd48tnj6wmberkg2xy800000003v0000000007nwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:26 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.10	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:26 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:26 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160226Z-1657d5bbd48wd55zet5pcra0cg00000003qg00000000buva x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:26 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.10	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:26 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:26 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160226Z-1657d5bbd48xlwdx82gahegw4000000003x000000000ew26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:26 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.10	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:26 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:26 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160226Z-1657d5bbd48tnj6wmberkg2xy800000003w00000000037at x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:26 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.10	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:26 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:26 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160226Z-1657d5bbd482krtfgrg72dfbtn00000003f000000000ctck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:26 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.10	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:26 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:26 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160226Z-1657d5bbd48cpbzgkvtewk0wu000000003sg00000000m6g6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:26 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.10	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:26 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:26 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:26 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b6c21a8e-c01e-008e-115a-177381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160226Z-1657d5bbd48f7nlxc7n5fnfzh000000003bg00000000dxrr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:26 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.10	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:27 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:27 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160227Z-1657d5bbd48xsz2nuzq4vfrzg800000003p00000000031em x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:27 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.10	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:27 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:27 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160227Z-1657d5bbd48f7nlxc7n5fnfzh000000003cg000000008rer x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:27 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.10	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:27 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:27 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 15519209-a01e-0021-36a2-18814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160227Z-1657d5bbd48hzllksrq1r6zsvs0000000110000000001h9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:27 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.10	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:27 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:27 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: a9a45936-c01e-00a1-54f1-167e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160227Z-1657d5bbd48f7nlxc7n5fnfzh0000000039g00000000s6za x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:27 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.10	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:27 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:27 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:27 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 18b29d22-e01e-0085-0978-18c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160227Z-1657d5bbd48hzllksrq1r6zsvs000000010g000000003q3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:27 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.10	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:28 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:28 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:28 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6bee43b5-001e-00a2-2106-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160228Z-1657d5bbd48t66tjar5xuq22r800000003k0000000011w9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:28 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.10	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:28 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:28 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:28 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160228Z-1657d5bbd48jwrqbupe3ktsx9w00000004000000000020nv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:28 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.10	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:28 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:28 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:28 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160228Z-1657d5bbd48762wn1qw4s5sd3000000003ng00000000553c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:28 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.10	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:28 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:28 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:28 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160228Z-1657d5bbd48vlsxxpe15ac3q7n00000003pg00000000huxa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:28 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.10	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:28 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:28 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:28 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160228Z-1657d5bbd48xsz2nuzq4vfrzg800000003k000000000h55h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:28 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.10	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:29 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:29 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:29 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fcca05a5-501e-00a0-3202-179d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160229Z-1657d5bbd48xdq5dkwwugdpzr000000003xg000000010v6w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:29 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.10	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:29 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:29 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:29 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160229Z-1657d5bbd48dfrdj7px744zp8s00000003h0000000004qcd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:29 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.10	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:29 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:29 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:29 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160229Z-1657d5bbd48cpbzgkvtewk0wu000000003ug000000009xtt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:29 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.10	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:29 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:29 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:29 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fbb49b00-e01e-00aa-4806-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160229Z-1657d5bbd48brl8we3nu8cxwgn0000000430000000004vzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:29 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.10	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:29 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:29 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:29 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d21ea5d-701e-0098-0502-17395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160229Z-1657d5bbd48wd55zet5pcra0cg00000003ng00000000p8tu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:29 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.10	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:30 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:30 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:30 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b6fa471e-401e-0067-43e5-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160230Z-1657d5bbd48xlwdx82gahegw4000000003y000000000acgc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:30 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.10	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:30 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:30 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:30 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a18d9b1d-601e-0002-1f03-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160230Z-1657d5bbd48wd55zet5pcra0cg00000003n000000000qns2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:30 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.10	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:30 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:30 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:30 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: d4fd285a-d01e-005a-06ed-167fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160230Z-1657d5bbd48xsz2nuzq4vfrzg800000003ng000000005fev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:30 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.10	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:30 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:30 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:30 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 77012b0e-b01e-0097-0bff-164f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160230Z-1657d5bbd48q6t9vvmrkd293mg00000003sg00000000367w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:30 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.10	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:30 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:30 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:30 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 6d2b2f65-e01e-0099-735a-17da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160230Z-1657d5bbd48lknvp09v995n79000000003dg000000003fdm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:30 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.10	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:30 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:31 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:30 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: c9f5ea47-201e-0071-33fe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160230Z-1657d5bbd48t66tjar5xuq22r800000003k0000000011wmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:31 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.10	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:30 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:31 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:30 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 4d8e5842-701e-0021-0efe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160230Z-1657d5bbd48762wn1qw4s5sd3000000003ng0000000055a7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:31 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.10	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:30 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:31 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:30 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 838d785c-001e-0014-24fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160230Z-1657d5bbd48xlwdx82gahegw4000000003wg00000000k1cb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:31 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.10	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:30 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:31 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:30 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 76dbcc6a-501e-0035-36ed-16c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160230Z-1657d5bbd48vlsxxpe15ac3q7n00000003qg00000000epbd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:31 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.10	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:31 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:31 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:31 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 8a56303a-c01e-0066-0f01-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160231Z-1657d5bbd48tnj6wmberkg2xy800000003w00000000037kw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:31 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.10	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:31 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:32 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:32 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0c184816-a01e-000d-72ff-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160232Z-1657d5bbd48xlwdx82gahegw4000000003w000000000ne9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:32 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.10	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:31 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:32 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: ca2bab4f-201e-0071-5e14-17ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160232Z-1657d5bbd4824mj9d6vp65b6n400000003xg00000000db0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:32 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.10	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:31 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:32 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: d3a3eb01-b01e-003d-1ef1-16d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160232Z-1657d5bbd48f7nlxc7n5fnfzh0000000038g00000000vwas x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.10	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:31 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:32 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:32 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: cd0b82ba-d01e-0049-1304-17e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160232Z-1657d5bbd482krtfgrg72dfbtn00000003e000000000gqaa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:32 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.10	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:32 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:33 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 4d8e59a4-701e-0021-64fe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160233Z-1657d5bbd48brl8we3nu8cxwgn000000043g000000002c5p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:33 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.10	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:33 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:33 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 75ef523f-601e-000d-02f2-162618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160233Z-1657d5bbd482krtfgrg72dfbtn00000003f000000000cu54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:33 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.10	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:33 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:33 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: c326dec7-201e-0003-0c12-17f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160233Z-1657d5bbd48lknvp09v995n79000000003b000000000fevy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:33 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.10	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:33 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:33 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 4ef38422-401e-000a-160c-174a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160233Z-1657d5bbd48762wn1qw4s5sd3000000003p0000000003423 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:33 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.10	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:33 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:33 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: cad35e9e-b01e-0021-3602-17cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160233Z-1657d5bbd48f7nlxc7n5fnfzh000000003bg00000000dy7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:33 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.10	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:33 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:33 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 87e265fd-201e-0051-4fe7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160233Z-1657d5bbd482lxwq1dp2t1zwkc00000003d000000000rff7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:33 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.10	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:34 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:34 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:34 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: c7b470af-b01e-005c-24fe-164c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160234Z-1657d5bbd48cpbzgkvtewk0wu000000003pg000000011wd7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:34 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.10	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:34 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:34 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:34 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: c9f5e5fc-201e-0071-5dfe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160234Z-1657d5bbd487nf59mzf5b3gk8n00000003b000000000e7gt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:34 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.10	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:34 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:34 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:34 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3e7839e3-701e-0053-5cff-163a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160234Z-1657d5bbd482lxwq1dp2t1zwkc00000003b00000000111pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:34 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.10	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:34 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:34 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:34 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 870e3040-401e-00a3-79ac-188b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160234Z-1657d5bbd48hzllksrq1r6zsvs00000000tg000000011gtw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:34 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.10	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:34 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:34 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:34 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 20e89b60-501e-008c-3a03-17cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160234Z-1657d5bbd48vlsxxpe15ac3q7n00000003q000000000fdyg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:34 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.10	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:35 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:35 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 838d7376-001e-0014-17fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160235Z-1657d5bbd48jwrqbupe3ktsx9w00000003yg000000009dd7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:35 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.10	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:35 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:35 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: b1fbfe33-a01e-003d-4fd4-1698d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160235Z-1657d5bbd48qjg85buwfdynm5w00000003pg000000011rs9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:35 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.10	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:35 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:35 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 7d18055e-701e-0098-56ff-16395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160235Z-1657d5bbd48q6t9vvmrkd293mg00000003r0000000009z54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:35 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.10	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:35 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:35 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 770fdf22-501e-0035-0d02-17c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160235Z-1657d5bbd48f7nlxc7n5fnfzh000000003a000000000ntr5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:35 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.10	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:35 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:35 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: c55b1dc3-701e-0097-42e9-16b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160235Z-1657d5bbd48wd55zet5pcra0cg00000003p000000000mpp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:35 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.10	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:35 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:35 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 4543d13f-701e-0050-5a04-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160235Z-1657d5bbd48sdh4cyzadbb374800000003f000000000w0my x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:35 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.10	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:35 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 961c0255-701e-005c-1406-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160235Z-1657d5bbd48qjg85buwfdynm5w00000003t000000000kmv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.10	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:35 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:35 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: fba86ca6-e01e-00aa-5200-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160235Z-1657d5bbd482lxwq1dp2t1zwkc00000003fg00000000bx9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:35 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.10	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:35 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:35 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 85329464-c01e-0034-6acc-162af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160235Z-1657d5bbd48q6t9vvmrkd293mg00000003ng00000000qmdp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.10	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:36 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:36 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:36 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 7cb43a82-e01e-0033-45fe-164695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160236Z-1657d5bbd48xlwdx82gahegw4000000003yg00000000808b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:36 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.10	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:36 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:36 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:36 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 9139889b-001e-0079-22f3-1612e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160236Z-1657d5bbd48q6t9vvmrkd293mg00000003s0000000005ufh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:36 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.10	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:36 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:36 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:36 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 626a0b0f-301e-006e-6de9-16f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160236Z-1657d5bbd48vhs7r2p1ky7cs5w000000040g00000000g808 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:36 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.10	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:36 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:36 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:36 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: de435f0b-f01e-0052-0101-179224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160236Z-1657d5bbd482tlqpvyz9e93p5400000003v0000000006z2p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:36 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.10	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:36 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:37 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:36 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: d51e0a59-d01e-005a-6cfe-167fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160236Z-1657d5bbd48tqvfc1ysmtbdrg000000003p0000000003ad4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:37 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.10	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:37 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:37 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:37 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: a1812648-601e-0002-69fe-16a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160237Z-1657d5bbd48tnj6wmberkg2xy800000003u000000000bd4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:37 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.10	58801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:37 UTC	192	OUT	GET /rules/rule702650v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:37 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:37 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEA1B544" x-ms-request-id: b87c1558-301e-0020-2414-176299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160237Z-1657d5bbd48cpbzgkvtewk0wu000000003s000000000qvek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:37 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 61 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702650" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedia" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.10	58800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:37 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:37 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:37 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 72218525-801e-002a-7701-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160237Z-1657d5bbd482tlqpvyz9e93p5400000003w00000000034ra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:37 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.10	58802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:37 UTC	192	OUT	GET /rules/rule703101v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:37 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:37 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F93037" x-ms-request-id: 8be95a60-a01e-0070-5ff2-16573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160237Z-1657d5bbd48brl8we3nu8cxwgn0000000420000000009d5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:37 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703101" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS"

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.10	58803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:02:37 UTC	192	OUT	GET /rules/rule703100v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 16:02:37 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:02:37 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:04 GMT ETag: "0x8DC582BEBCD5699" x-ms-request-id: 4dd07817-401e-005b-6104-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T160237Z-1657d5bbd48tnj6wmberkg2xy800000003sg00000000mdhs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 16:02:37 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 31 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 41 54 53 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 41 54 53 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703100" V="1" DC="SM" EN="Office.Telemetry.Event.Office.MATS" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMATS" S="Medium" /> <F T="2">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3852, Parent PID: 3420

General

Target ID:	0
Start time:	12:02:07
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3936, Parent PID: 3852

General

Target ID:	2
Start time:	12:02:12
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2028,i,466579838678521311,16064752721176592747,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6804, Parent PID: 3420

General

Target ID:	3
Start time:	12:02:15
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://userer.gotoassist.com"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://userer.gotoassist.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3852_349680840\sets.json

Chrome Cache Entry: 130

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Windows Analysis Report
http://userer.gotoassist.com