Edit tour

Windows Analysis Report
https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cSN7PR19MB66126F57B7EFCF40B749C3FE847E2%40SN7PR19MB6612.namprd19.prod.outlook.com%3e

Overview

General Information

Sample URL:	https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cSN7PR19MB66126F57B7EFCF40B749C3FE847E2%40SN7PR19MB6612.namprd19.prod.outlook.com%3e
Analysis ID:	1529333
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 712 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2544 --field-trial-handle=2508,i,14472495800388626087,17777241064131445827,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cSN7PR19MB66126F57B7EFCF40B749C3FE847E2%40SN7PR19MB6612.namprd19.prod.outlook.com%3e" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=bc3da322-4727-861b-5eb4-b16d3af9813b&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120984531044.ad8bde88-aa8b-46ae-826c-e1703c48a0ff&state=Dcs7FoAgDAXRoMflRALE8FxO-Nhaun0p7nQTiGhftiXIClUrMJWU5YZeJYnq6QNtTIDd0VjNJyNb55mqlK5weZ6w3iO-n8cf	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	HTTP Parser: Title: Sign in to Outlook does not match URL
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=bc3da322-4727-861b-5eb4-b16d3af9813b&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120984531044.ad8bde88-aa8b-46ae-826c-e1703c48a0ff&state=Dcs7FoAgDAXRoMflRALE8FxO-Nhaun0p7nQTiGhftiXIClUrMJWU5YZeJYnq6QNtTIDd0VjNJyNb55mqlK5weZ6w3iO-n8cf	HTTP Parser: Title: Sign in to Outlook does not match URL

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=bc3da322-4727-861b-5eb4-b16d3af9813b&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120984531044.ad8bde88-aa8b-46ae-826c-e1703c48a0ff&state=Dcs7FoAgDAXRoMflRALE8FxO-Nhaun0p7nQTiGhftiXIClUrMJWU5YZeJYnq6QNtTIDd0VjNJyNb55mqlK5weZ6w3iO-n8cf	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=bc3da322-4727-861b-5eb4-b16d3af9813b&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120984531044.ad8bde88-aa8b-46ae-826c-e1703c48a0ff&state=Dcs7FoAgDAXRoMflRALE8FxO-Nhaun0p7nQTiGhftiXIClUrMJWU5YZeJYnq6QNtTIDd0VjNJyNb55mqlK5weZ6w3iO-n8cf	HTTP Parser: <input type="password" .../> found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	HTTP Parser: No favicon
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=bc3da322-4727-861b-5eb4-b16d3af9813b&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120984531044.ad8bde88-aa8b-46ae-826c-e1703c48a0ff&state=Dcs7FoAgDAXRoMflRALE8FxO-Nhaun0p7nQTiGhftiXIClUrMJWU5YZeJYnq6QNtTIDd0VjNJyNb55mqlK5weZ6w3iO-n8cf	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=bc3da322-4727-861b-5eb4-b16d3af9813b&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120984531044.ad8bde88-aa8b-46ae-826c-e1703c48a0ff&state=Dcs7FoAgDAXRoMflRALE8FxO-Nhaun0p7nQTiGhftiXIClUrMJWU5YZeJYnq6QNtTIDd0VjNJyNb55mqlK5weZ6w3iO-n8cf	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=bc3da322-4727-861b-5eb4-b16d3af9813b&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120984531044.ad8bde88-aa8b-46ae-826c-e1703c48a0ff&state=Dcs7FoAgDAXRoMflRALE8FxO-Nhaun0p7nQTiGhftiXIClUrMJWU5YZeJYnq6QNtTIDd0VjNJyNb55mqlK5weZ6w3iO-n8cf	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49820 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50066 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49820 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: global traffic	HTTP traffic detected: GET /owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cSN7PR19MB66126F57B7EFCF40B749C3FE847E2%40SN7PR19MB6612.namprd19.prod.outlook.com%3e HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=B318D9A06B544A718D95CEA76353EAC8; OIDC=1; OpenIdConnect.nonce.v3.0tgEVfSKyAdfNUVh5YjvzF0kH6wQrbxmxjAi0wgU8Gw=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12; X-OWA-RedirectHistory=ArLym14B7KywXs7n3Ag
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_54b287bb6b3cdb3a7698.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_54b287bb6b3cdb3a7698.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /owa/ HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=B318D9A06B544A718D95CEA76353EAC8; OIDC=1; OpenIdConnect.nonce.v3.0tgEVfSKyAdfNUVh5YjvzF0kH6wQrbxmxjAi0wgU8Gw=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12; X-OWA-RedirectHistory=ArLym14B7KywXs7n3Ag
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=B318D9A06B544A718D95CEA76353EAC8; OIDC=1; OpenIdConnect.nonce.v3.0tgEVfSKyAdfNUVh5YjvzF0kH6wQrbxmxjAi0wgU8Gw=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12; OpenIdConnect.nonce.v3.uoM44bqdQIg2juQ339eEZW2fzhEUn6O1HhzxVE5Udx0=638640120984531044.ad8bde88-aa8b-46ae-826c-e1703c48a0ff; X-OWA-RedirectHistory=ArLym14BZHCYbs7n3Ag\|ArLym14B7KywXs7n3Ag
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: r4.res.office365.com

Source: chromecache_119.2.dr	String found in binary or memory: http://github.com/jquery/globalize
Source: chromecache_79.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_79.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49945 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50066 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@20/86@16/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2544 --field-trial-handle=2508,i,14472495800388626087,17777241064131445827,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cSN7PR19MB66126F57B7EFCF40B749C3FE847E2%40SN7PR19MB6612.namprd19.prod.outlook.com%3e"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2544 --field-trial-handle=2508,i,14472495800388626087,17777241064131445827,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://login.microsoftonline.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	142.250.181.228	true	false	unknown
HHN-efz.ms-acdc.office.com	52.97.135.98	true	false	unknown
FRA-efz.ms-acdc.office.com	52.98.253.146	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
r4.res.office365.com	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
outlook.office365.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cSN7PR19MB66126F57B7EFCF40B749C3FE847E2%40SN7PR19MB6612.namprd19.prod.outlook.com%3e	false	unknown
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=bc3da322-4727-861b-5eb4-b16d3af9813b&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120984531044.ad8bde88-aa8b-46ae-826c-e1703c48a0ff&state=Dcs7FoAgDAXRoMflRALE8FxO-Nhaun0p7nQTiGhftiXIClUrMJWU5YZeJYnq6QNtTIDd0VjNJyNb55mqlK5weZ6w3iO-n8cf	false	unknown
https://outlook.office365.com/owa/prefetch.aspx	false	unknown
https://outlook.office365.com/owa/	false	unknown
https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX&sso_reload=true	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://github.com/jquery/globalize	chromecache_119.2.dr	false		unknown
https://login.microsoftonline.com	chromecache_79.2.dr	false	URL Reputation: safe	unknown
https://login.windows-ppe.net	chromecache_79.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.98.243.34	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
52.97.135.98	HHN-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1529333
Start date and time:	2024-10-08 21:20:12 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cSN7PR19MB66126F57B7EFCF40B749C3FE847E2%40SN7PR19MB6612.namprd19.prod.outlook.com%3e
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@20/86@16/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://outlook.office365.com/owa/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.250.110.84, 172.217.16.206, 34.104.35.123, 20.190.160.22, 40.126.32.74, 40.126.32.72, 40.126.32.76, 40.126.32.68, 20.190.160.17, 40.126.32.134, 20.190.160.20, 2.19.126.146, 2.19.126.143, 40.126.32.136, 40.126.32.140, 20.190.160.14, 40.126.32.133, 142.250.186.42, 142.250.186.74, 142.250.185.138, 216.58.206.74, 142.250.184.202, 172.217.18.10, 142.250.185.170, 172.217.16.202, 142.250.186.170, 142.250.186.106, 142.250.186.138, 142.250.185.74, 216.58.206.42, 142.250.185.106, 142.250.185.202, 142.250.74.202, 23.38.98.96, 23.38.98.104, 20.12.23.50, 192.229.221.95, 88.221.110.106, 2.16.100.168, 20.242.39.171, 40.79.141.154, 13.69.239.78, 13.95.31.18, 142.250.185.227, 4.175.87.197, 88.221.110.91
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, onedscolprdfrc06.francecentral.cloudapp.azure.com, clients2.google.com, ocsp.digicert.com, login.live.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, login.mso.msidentity.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, onedscolprdneu15.northeurope.cloudapp.azure.com, e40491.dscg.akamaiedge.net, client.wns.windows.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, www.tm.ak.prd.aadg.akadns.net, www.tm.v4.a.prd.aadg.akadns.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, eu.events.data.trafficmanager.net, dow
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cSN7PR19MB66126F57B7EFCF40B749C3FE847E2%40SN7PR19MB6612.namprd19.prod.outlook.com%3e

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_ Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Next", "text_input_field_labels":["Email, phone, or Skype"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Outlook", "has_visible_qrcode":false}

URL: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_ Model: jbxai	{ "brand":["Microsoft"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Next", "text_input_field_labels":["Email, phone, or Skype"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Outlook", "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	downloaded
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	232394
Entropy (8bit):	5.54543362321178
Encrypted:	false
SSDEEP:	1536:yldzLx/ivZfjbOv/LBbLeXeKEXK81KKVKKdKbSK0cKcyKf75DMkvqBCWcDAPf4bT:Ux/ivZfjbOv/LBbLMTq9cDw4bLl1We/
MD5:	AF8D946B64D139A380CF3A1C27BDBEB0
SHA1:	C76845B6FFEAF14450795C550260EB618ABD60AB
SHA-256:	37619B16288166CC76403F0B7DF6586349B2D5628DE00D5850C815D019B17904
SHA-512:	C5CFB514F993310676E834C8A5477576BD57C82A8665387F9909BA0D4C3C2DE693E738ACAA74E7B4CA20894EA2FEEA5CF9A2428767D03FE1DE9C84538FDC3EE9
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8048.16/resources/styles/0/boot.worldwide.mouse.css
Preview:	.feedbackList{-webkit-animation-duration:.17s;-moz-animation-duration:.17s;animation-duration:.17s;-webkit-animation-name:feedbackListFrames;-moz-animation-name:feedbackListFrames;animation-name:feedbackListFrames;-webkit-animation-fill-mode:both;-moz-animation-fill-mode:both;animation-fill-mode:both}@-webkit-keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-webkit-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@-moz-keyframes feedbackListFrames{from{-moz-transform:scale(1,1);transform:scale(1,1);-moz-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-moz-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);-moz-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	downloaded
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	dropped
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
Reputation:	low
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994), with no line terminators
Category:	downloaded
Size (bytes):	994
Entropy (8bit):	4.934955158256183
Encrypted:	false
SSDEEP:	12:U8Chx3fpler8DDMv1+I+zpcuVkicq32EXgBA5e2KMLT:JC3G0z1Ddf2NGe2KG
MD5:	E2110B813F02736A4726197271108119
SHA1:	D7AC10CC425A7B67BF16DDA0AAEF1FEB00A79857
SHA-256:	6D1BE7ED96DD494447F348986317FAF64728CCF788BE551F2A621B31DDC929AC
SHA-512:	E79CF6DB777D62690DB9C975B5494085C82E771936DB614AF9C75DB7CE4B6CA0A224B7DFB858437EF1E33C6026D772BE9DBBB064828DB382A4703CB34ECEF1CF
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8048.16/resources/images/0/sprite1.mouse.css
Preview:	.image-loading_blackbg-gif{background:url('loading_blackbg.gif');width:16px;height:16px}.image-loading_whitebg-gif{background:url('loading_whitebg.gif');width:16px;height:16px}.image-thinking16_blue-gif{background:url('thinking16_blue.gif');width:16px;height:16px}.image-thinking16_grey-gif{background:url('thinking16_grey.gif');width:16px;height:16px}.image-thinking16_white-gif{background:url('thinking16_white.gif');width:16px;height:16px}.image-thinking24-gif{background:url('thinking24.gif');width:24px;height:24px}.image-thinking32_blue-gif{background:url('thinking32_blue.gif');width:32px;height:32px}.image-thinking32_grey-gif{background:url('thinking32_grey.gif');width:32px;height:32px}.image-thinking32_white-gif{background:url('thinking32_white.gif');width:32px;height:32px}.image-clear1x1-gif{width:1px;height:1px;background:url('sprite1.mouse.png') -0 -0}.csimg{padding:0;border:none;background-repeat:no-repeat;-webkit-touch-callout:none}span.csimg{-ms-high-contrast-adjust:none}

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
Category:	downloaded
Size (bytes):	254
Entropy (8bit):	7.066074991728423
Encrypted:	false
SSDEEP:	6:XtS8G99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:XAH99kRX1YQBDFCnDXdWYtrE
MD5:	847A4212B99B9076EE39328B24CD30AF
SHA1:	73F15078CF1D396485F644A79B6E25EF0637685D
SHA-256:	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
SHA-512:	9AF77E9ED8BD9A39A47F36AAC2D01B5AF5D56C04CD933427DF95CC80904D7EE7AC3F7F9443D8AEF236CC84FB4DC4CC335AF0BF8F9BC0C13D720187096D149220
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
Category:	downloaded
Size (bytes):	663451
Entropy (8bit):	5.3635307555313165
Encrypted:	false
SSDEEP:	12288:YhqblwQ9eTw/suNyIzaJS/pWYawUWufSxwDr2o/5YP1B:Yhqblt9e8/sMzaJS/pWYawUWufSxwDrW
MD5:	761CE9E68C8D14F49B8BF1A0257B69D6
SHA1:	8CF5D714D35EFFA54F3686065CB62CCE028E2C77
SHA-256:	BEAA65AD34340E61E9E701458E2CCFF8F9073FDEBBC3593A2C7EC8AFEACB69C1
SHA-512:	CEC948666FBA0F56D3DA27A931033C3A581C9C00FEC4D3DDCF41324525B5B5321AE3AB89581ECC7F497DE85EF684AB277C8A2DB393D526416CEB76C91A1B9263
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8026.24/scripts/boot.worldwide.0.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.0.mouse.js'] = (new Date()).getTime();../* Empty file */;Function.__typeName="Function";Function.__class=!0;Function.createCallback=function(n,t){return function(){var r=arguments.length;if(r>0){for(var u=[],i=0;i<r;i++)u[i]=arguments[i];u[r]=t;return n.apply(this,u)}return n.call(this,t)}};Function.prototype.bind=Function.prototype.bind\|\|function(n){if(typeof this!="function")throw new TypeError("bind(): we can only bind to functions");var u=Array.prototype.slice.call(arguments,1),r=this,t=function(){},i=function(){return r.apply(this instanceof t?this:n,u.concat(Array.prototype.slice.call(arguments)))};this.prototype&&(t.prototype=this.prototype);i.prototype=new t;return i};Function.createDelegate=function(n,t){return function(){return t.apply(n,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Error.__typeNam

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
Category:	downloaded
Size (bytes):	122193
Entropy (8bit):	7.997505273485286
Encrypted:	true
SSDEEP:	3072:H4ojbjOwCNA0H+Zenw+OA6m3SmjcnlDHG21TIoN:dHyi0Ity3wnY2lIA
MD5:	AF2A7A4929E13F15A045C8C8D80A4543
SHA1:	6A1EC81A5085D0846C77DD616AE686FF732C32D6
SHA-256:	EB47C5509CEF44C582EF8ABB8C58766EA6118AD40B0FFC22A7652ED1DC6FEE8B
SHA-512:	D3B1FC08CB7DDE27E9A16B749B0024A9F11D5067B0D023F8EB2E468533297DFC5BD7739C9B696F8D11D269350FA5F2D329FE6ABC4AB679888FDC97B2450DB336
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.QX..................Oix..).NK7...KW...........`....G/..=......[..R......Y....KS.7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...a.^.]..a.X&......2.o...$,..s..l<^0)..1...Yu..w.$..0c.=c.}...xT"d....{..@.&.. .es0q.$bl.D..1:z+y..t.F..X.....qn.../fUI...q....r.f.wk..Q.Y.I2.....<.GU'...\|..1t.y...{....w..y.s.+.t5.A.J.............$...}...k.......tu........;Vf...]...\|.Q......Z.].^...q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+..*T.....p....S...qR..+K1@k..mkQo...A........]p_.X2........B.....I..3..7..]d....@.bX....z.g...\|..V-K[..^(..y...^N.^..oJF.kQ.P.R..F..om.B.pL.<F....R...(..i..,......I.F< ..T...`1.W3....L....+.S.M.c....110..........H....E,O..v..l..=...H$.J..J....4.C..dzPI..S.B@RJ.V>..GJ."/.eEwC..Q}d.k......KN\|.i...=.....!.V....<%J.D......b

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5139
Entropy (8bit):	7.865234009830226
Encrypted:	false
SSDEEP:	96:oX2DsRVNYc82nTGTirCPqKO1gDPFjDiwK3aM5yO/bUlVV6JKo5N9jIMw7RLW1ZHb:ofRgc82nTprQsgDNDP7QgVVoH9+kMK9
MD5:	8B36337037CFF88C3DF203BB73D58E41
SHA1:	1ADA36FA207B8B96B2A5F55078BFE2A97ACEAD0E
SHA-256:	E4E1E65871749D18AEA150643C07E0AAB2057DA057C6C57EC1C3C43580E1C898
SHA-512:	97D8CC97C4577631D8D58C0D9276EE55E4B80128080220F77E01E45385C20FE55D208122A8DFA5DADCB87543B1BC291B98DBBA44E8A2BA90D17C638C15D48793
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png
Preview:	.PNG........IHDR...V...H.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DB120779422011EA9888910153D3A5E6" xmpMM:DocumentID="xmp.did:DB12077A422011EA9888910153D3A5E6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DB120777422011EA9888910153D3A5E6" stRef:documentID="xmp.did:DB120778422011EA9888910153D3A5E6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.WI....IDATx..]]l.......(.5.K0P..0...E.qT..J X)F.(5X....J.}(m.R5.Q...RUEUPU~.....qp@.b......L...k.m"0......"c.3

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	660449
Entropy (8bit):	5.4121922690110535
Encrypted:	false
SSDEEP:	12288:3PUKyvwjOOvwZ1ARuxntuicBh8hS11dsUA:yvjZ+/pIUA
MD5:	D9E3D2CE0228D2A5079478AAE5759698
SHA1:	412F45951C6AEDA5F3DF2C52533171FC7BDD5961
SHA-256:	7041D585609800051E4F451792AEC2B8BD06A4F2D29ED6F5AD8841AAE5107502
SHA-512:	06700C65BEF4002EBFBFF9D856C12E8D71F408BACA2D2103DDE1C28319B6BD3859FA9D289D8AEB6DD484E802040F6EE537F31F97B4B60A6B120A6882C992207A
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8048.16/scripts/boot.worldwide.3.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.3.mouse.js'] = (new Date()).getTime();..;_n.a.jR=function(n){return n.dS()};_n.a.jZ=function(n){return n.eh()};_n.a.jP=function(n){return n.cC()};_n.a.jQ=function(n){return n.ca()};_n.a.hZ=function(n){return n.dO};_n.a.jU=function(n){return n.ed()};_n.a.jT=function(n){return n.ea()};_n.a.kb=function(n){return n.ej()};_n.a.hM=function(n){return 300};_n.a.fh=function(n){return n.V};_n.a.jV=function(n){return n.bI()};_n.a.ie=function(n){return n.mh()};_n.a.km=function(n){return n.bl()};_n.a.ka=function(n){return n.ei()};_n.a.ko=function(n){return n.cV()};_n.a.eX=function(n){return _y.E.isInstanceOfType(n)?n.y:null};_n.a.jN=function(n){return n.c()};_n.a.gm=function(n){return n.b()};_n.a.jM=function(n){return n.b()};_n.a.ib=function(n){return n.jM()};_n.a.iq=function(n){return n.bG};_n.a.iX=function(n){return _n.V.isInstanceOfType(n)?n

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	downloaded
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	17453
Entropy (8bit):	3.890509953257612
Encrypted:	false
SSDEEP:	192:P7FRTHQpmA3ZkXOL25cYty7l6UWUjMJBSab/vR+yzP:P/cpmgkF5+JWUjMp40P
MD5:	7916A894EBDE7D29C2CC29B267F1299F
SHA1:	78345CA08F9E2C3C2CC9B318950791B349211296
SHA-256:	D8F5AB3E00202FD3B45BE1ACD95D677B137064001E171BC79B06826D98F1E1D3
SHA-512:	2180ABE47FBF76E2E0608AB3A4659C1B7AB027004298D81960DC575CC2E912ECCA8C131C6413EBBF46D2AAA90E392EB00E37AED7A79CDC0AC71BA78D828A84C7
Malicious:	false
Reputation:	low
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	659798
Entropy (8bit):	5.352921769071548
Encrypted:	false
SSDEEP:	12288:nEMsQrWEWbnByixmwgXZewhYcFiG4DUIxo:nEMsJpBJgHKcFQNo
MD5:	9786D38346567E5E93C7D03B06E3EA2D
SHA1:	23EF8C59C5C9AA5290865933B29C9C56AB62E3B0
SHA-256:	263307E3FE285C85CB77CF5BA69092531CE07B7641BF316EF496DCB5733AF76C
SHA-512:	4962CDF483281AB39D339A7DA105A88ADDB9C210C9E36EA5E36611D7135D19FEC8B3C9DBA3E97ABB36D580F194F1860813071FD6CBEDE85D3E88952D099D6805
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8048.16/scripts/boot.worldwide.1.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.1.mouse.js'] = (new Date()).getTime();..;_a.d.G=function(n,t){this.b=n;this.a=t};_a.d.G.prototype={b:0,a:0};_a.fo=function(n){this.s=n};_a.fo.prototype={s:null,t:null,i:function(){return this.s.currentTarget},e:function(){return this.t?this.t.x:this.s.pageX},f:function(){return this.t?this.t.y:this.s.pageY},o:function(){return this.s.relatedTarget},b:function(){return this.s.target},n:function(){return this.s.timeStamp\|\|+new Date},a:function(){var n=this.s.which;!n&&_a.o.a().K&&this.s.type==="keypress"&&(n=this.u());return n},u:function(){return this.s.keyCode},m:function(){return this.s.originalEvent},j:function(){return this.s.type},k:function(){return this.s.originalEvent.touches},q:function(){return this.s.isDefaultPrevented()},g:function(){return this.s.shiftKey},h:function(){return _j.G.a().P?this.s.metaKey:this.s.ctrlKey},l:

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
Category:	downloaded
Size (bytes):	663451
Entropy (8bit):	5.3635307555313165
Encrypted:	false
SSDEEP:	12288:YhqblwQ9eTw/suNyIzaJS/pWYawUWufSxwDr2o/5YP1B:Yhqblt9e8/sMzaJS/pWYawUWufSxwDrW
MD5:	761CE9E68C8D14F49B8BF1A0257B69D6
SHA1:	8CF5D714D35EFFA54F3686065CB62CCE028E2C77
SHA-256:	BEAA65AD34340E61E9E701458E2CCFF8F9073FDEBBC3593A2C7EC8AFEACB69C1
SHA-512:	CEC948666FBA0F56D3DA27A931033C3A581C9C00FEC4D3DDCF41324525B5B5321AE3AB89581ECC7F497DE85EF684AB277C8A2DB393D526416CEB76C91A1B9263
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8048.16/scripts/boot.worldwide.0.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.0.mouse.js'] = (new Date()).getTime();../* Empty file */;Function.__typeName="Function";Function.__class=!0;Function.createCallback=function(n,t){return function(){var r=arguments.length;if(r>0){for(var u=[],i=0;i<r;i++)u[i]=arguments[i];u[r]=t;return n.apply(this,u)}return n.call(this,t)}};Function.prototype.bind=Function.prototype.bind\|\|function(n){if(typeof this!="function")throw new TypeError("bind(): we can only bind to functions");var u=Array.prototype.slice.call(arguments,1),r=this,t=function(){},i=function(){return r.apply(this instanceof t?this:n,u.concat(Array.prototype.slice.call(arguments)))};this.prototype&&(t.prototype=this.prototype);i.prototype=new t;return i};Function.createDelegate=function(n,t){return function(){return t.apply(n,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Error.__typeNam

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	662286
Entropy (8bit):	5.315860951951661
Encrypted:	false
SSDEEP:	12288:YfmmzLJTD/JilMGk4hBR310FaHHxpJy7qVfb4cSPo:Yfm+T7US7SR310FaHHTJy7qJ4rPo
MD5:	12204899D75FC019689A92ED57559B94
SHA1:	CCF6271C6565495B18C1CED2F7273D5875DBFB1F
SHA-256:	39DAFD5ACA286717D9515F24CF9BE0C594DFD1DDF746E6973B1CE5DE8B2DD21B
SHA-512:	AA397E6ABD4C54538E42CCEDA8E3AA64ACE76E50B231499C20E88CF09270AECD704565BC9BD3B27D90429965A0233F99F27697F66829734FF02511BD096CF030
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8026.24/scripts/boot.worldwide.2.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.2.mouse.js'] = (new Date()).getTime();.._y.lC=function(){};_y.lC.registerInterface("_y.lC");_y.jw=function(){};_y.jw.registerInterface("_y.jw");_y.lA=function(){};_y.lA.registerInterface("_y.lA");var IDelayedSendEvent=function(){};IDelayedSendEvent.registerInterface("IDelayedSendEvent");var IIsShowingComposeInReadingPaneEvent=function(){};IIsShowingComposeInReadingPaneEvent.registerInterface("IIsShowingComposeInReadingPaneEvent");var ISendFailedO365Event=function(){};ISendFailedO365Event.registerInterface("ISendFailedO365Event");var ISendFailureRemoveO365Event=function(){};ISendFailureRemoveO365Event.registerInterface("ISendFailureRemoveO365Event");_y.gw=function(){};_y.gw.registerInterface("_y.gw");_y.iB=function(){};_y.iB.registerInterface("_y.iB");_y.ih=function(){};_y.ih.registerInterface("_y.ih");_y.jy=function(){};_y.jy.regis

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	659798
Entropy (8bit):	5.352921769071548
Encrypted:	false
SSDEEP:	12288:nEMsQrWEWbnByixmwgXZewhYcFiG4DUIxo:nEMsJpBJgHKcFQNo
MD5:	9786D38346567E5E93C7D03B06E3EA2D
SHA1:	23EF8C59C5C9AA5290865933B29C9C56AB62E3B0
SHA-256:	263307E3FE285C85CB77CF5BA69092531CE07B7641BF316EF496DCB5733AF76C
SHA-512:	4962CDF483281AB39D339A7DA105A88ADDB9C210C9E36EA5E36611D7135D19FEC8B3C9DBA3E97ABB36D580F194F1860813071FD6CBEDE85D3E88952D099D6805
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8026.24/scripts/boot.worldwide.1.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.1.mouse.js'] = (new Date()).getTime();..;_a.d.G=function(n,t){this.b=n;this.a=t};_a.d.G.prototype={b:0,a:0};_a.fo=function(n){this.s=n};_a.fo.prototype={s:null,t:null,i:function(){return this.s.currentTarget},e:function(){return this.t?this.t.x:this.s.pageX},f:function(){return this.t?this.t.y:this.s.pageY},o:function(){return this.s.relatedTarget},b:function(){return this.s.target},n:function(){return this.s.timeStamp\|\|+new Date},a:function(){var n=this.s.which;!n&&_a.o.a().K&&this.s.type==="keypress"&&(n=this.u());return n},u:function(){return this.s.keyCode},m:function(){return this.s.originalEvent},j:function(){return this.s.type},k:function(){return this.s.originalEvent.touches},q:function(){return this.s.isDefaultPrevented()},g:function(){return this.s.shiftKey},h:function(){return _j.G.a().P?this.s.metaKey:this.s.ctrlKey},l:

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 4730
Category:	downloaded
Size (bytes):	1665
Entropy (8bit):	7.8887433425840845
Encrypted:	false
SSDEEP:	48:XCgINmlfnsz0OwnqV9T4+Z1t6kfcLOR7LgV:XhlvJOyqV9UCfyO12
MD5:	EB69D86E918C5776FDC33F839B0C114A
SHA1:	0E094ECFE371B5F9267778302EE6443C76B5BEC6
SHA-256:	112E2C223763BC148BB26D43C3B95E9CA5F9B6860BE5A4FD14617E204E0A5D28
SHA-512:	8277D72F775F90587B6C88992309B84242ED554EB82964D1D59D7826F985AA9F3CE323B6E362300997A4A63AA8DD6577CB36430417825AA04F69E2FC0B5D26BC
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_54b287bb6b3cdb3a7698.js
Preview:	...........W[o.6.~.`...$..K.z@..K..1b.....%.6...H.....l.q.......&..;....{.^#......w.G..P.....u.....e.....v.S..P.F4$....$@.!..e>.1.X.."....h$x...X.[.+.B.(y$.3T.s"@],...w...'`..).m..s.>Q.qE}.0....~0IP..".lB...........'t.Nd..y.6. I..q.&K...i..4n......S......>!@.5.8....g.....2...1 ..').u<....-..^_...A.+7..$b.!.!. ..I......A@.s4...g.px,...S6$..Uo.h.......T<.I.kk..$n....J..D.j..p.u.\)..&J.]...$.....d.b...;..(}.]~vn.R..2Wm.M<@.Nx.).\|u7....~7..%d?...n.~.~>.Qvhz.^.f...M3.......;;....o.n..I........Z{.0_.UP6.i.a..b.Z..m..J...8,.......m..n.k.@.{.>.d.PPPKK...o.rM.......D..._A3...r.....zn..q9...'_(.u......E[.\....T~].).M.C...Y.X\|X..(.w{]...d.(...c...<..p..L)OdQ.E..al=.../0#.q."i..`..c.N.......+.P.G.T9q.CG...l;S.h...q.....[...D...........D.....l...........2..O.;-~....(.3..D.T......b#.....j......{.g.g...(..Q..Tv..]o.4.Z....s.FL.h..D.bH/.C..<aj....u..=.F...R;lz.j.utT....F...ll..V..}.V.V....Q=h...k.R..v....^..r.}AA.......=.%.A..Z+..0;`..........3.a.[.q...

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
Category:	dropped
Size (bytes):	987
Entropy (8bit):	6.922003634904799
Encrypted:	false
SSDEEP:	24:PJjxEK0nWpBzo0XxDuLHeOWXG4OZ7DAJuLHenX3D+VRmK9cR+w/b:lxEX4OuERAVwR/QP/b
MD5:	E58AAFC980614A9CD7796BEA7B5EA8F0
SHA1:	D4CAC92DCDE0CAF7C571E6D791101DA94FDBD2CA
SHA-256:	8B34A475187302935336BF43A2BF2A4E0ADB9A1E87953EA51F6FCF0EF52A4A1D
SHA-512:	2DAC06596A11263DF1CFAB03EDA26D0A67B9A4C3BAA6FB6129CDBF0A157C648F5B0F5859B5CA689EFDF80F946BF4D854BA2B2C66877C5CE3897D72148741FCC9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....fExif..MM..................>...........F.(...........1.........N.......H.......H....paint.net 4.2.9....C....................................................................C.........................................................................2..!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......[.4..lz.....K.S..p.>.9.r9j..'.\.qrW..mo...X9ZV<./x...EX...m.Prj..A.EtG...K..mr....Lc.T.8...nlY.V.{6...R...]..(.y...)^.5V.IVO.W.B.19.R\...f.U.....'..S:..k.6..).f.n._3*....}.y.8.EusH..y.`.mA...W.}...bL..:..b.<f..(lH#R....v._...........9N~S..

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.945787382366693
Encrypted:	false
SSDEEP:	3:yionv//thPnFuXf8Lts7CX9/gm6Kp0syxtuIdsvFQAahUMZ/jp:6v/lhPBR/C+aNuqsvFQA0UMpp
MD5:	3EDA15637AFEAC6078F56C9DCC9BBDB8
SHA1:	97B900884183CB8CF99BA069EEDC280C599C1B74
SHA-256:	68C66D144855BA2BC8B8BEE88BB266047367708C1E281A21B9D729B1FBD23429
SHA-512:	06B21827589FCAF63B085DB2D662737B24A39A697FF9138BDF188408647C3E90784B355F2B8390160CA487992C033CE735599271EE35873E1941812AB6C34B52
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8048.16/resources/images/0/sprite1.mouse.png
Preview:	.PNG........IHDR...X..........x......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK..1......Om.O ...j.a...\BW....IEND.B`.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 4730
Category:	dropped
Size (bytes):	1665
Entropy (8bit):	7.8887433425840845
Encrypted:	false
SSDEEP:	48:XCgINmlfnsz0OwnqV9T4+Z1t6kfcLOR7LgV:XhlvJOyqV9UCfyO12
MD5:	EB69D86E918C5776FDC33F839B0C114A
SHA1:	0E094ECFE371B5F9267778302EE6443C76B5BEC6
SHA-256:	112E2C223763BC148BB26D43C3B95E9CA5F9B6860BE5A4FD14617E204E0A5D28
SHA-512:	8277D72F775F90587B6C88992309B84242ED554EB82964D1D59D7826F985AA9F3CE323B6E362300997A4A63AA8DD6577CB36430417825AA04F69E2FC0B5D26BC
Malicious:	false
Reputation:	low
Preview:	...........W[o.6.~.`...$..K.z@..K..1b.....%.6...H.....l.q.......&..;....{.^#......w.G..P.....u.....e.....v.S..P.F4$....$@.!..e>.1.X.."....h$x...X.[.+.B.(y$.3T.s"@],...w...'`..).m..s.>Q.qE}.0....~0IP..".lB...........'t.Nd..y.6. I..q.&K...i..4n......S......>!@.5.8....g.....2...1 ..').u<....-..^_...A.+7..$b.!.!. ..I......A@.s4...g.px,...S6$..Uo.h.......T<.I.kk..$n....J..D.j..p.u.\)..&J.]...$.....d.b...;..(}.]~vn.R..2Wm.M<@.Nx.).\|u7....~7..%d?...n.~.~>.Qvhz.^.f...M3.......;;....o.n..I........Z{.0_.UP6.i.a..b.Z..m..J...8,.......m..n.k.@.{.>.d.PPPKK...o.rM.......D..._A3...r.....zn..q9...'_(.u......E[.\....T~].).M.C...Y.X\|X..(.w{]...d.(...c...<..p..L)OdQ.E..al=.../0#.q."i..`..c.N.......+.P.G.T9q.CG...l;S.h...q.....[...D...........D.....l...........2..O.;-~....(.3..D.T......b#.....j......{.g.g...(..Q..Tv..]o.4.Z....s.FL.h..D.bH/.C..<aj....u..=.F...R;lz.j.utT....F...ll..V..}.V.V....Q=h...k.R..v....^..r.}AA.......=.%.A..Z+..0;`..........3.a.[.q...

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	dropped
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
Category:	dropped
Size (bytes):	122193
Entropy (8bit):	7.997505273485286
Encrypted:	true
SSDEEP:	3072:H4ojbjOwCNA0H+Zenw+OA6m3SmjcnlDHG21TIoN:dHyi0Ity3wnY2lIA
MD5:	AF2A7A4929E13F15A045C8C8D80A4543
SHA1:	6A1EC81A5085D0846C77DD616AE686FF732C32D6
SHA-256:	EB47C5509CEF44C582EF8ABB8C58766EA6118AD40B0FFC22A7652ED1DC6FEE8B
SHA-512:	D3B1FC08CB7DDE27E9A16B749B0024A9F11D5067B0D023F8EB2E468533297DFC5BD7739C9B696F8D11D269350FA5F2D329FE6ABC4AB679888FDC97B2450DB336
Malicious:	false
Reputation:	low
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.QX..................Oix..).NK7...KW...........`....G/..=......[..R......Y....KS.7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...a.^.]..a.X&......2.o...$,..s..l<^0)..1...Yu..w.$..0c.=c.}...xT"d....{..@.&.. .es0q.$bl.D..1:z+y..t.F..X.....qn.../fUI...q....r.f.wk..Q.Y.I2.....<.GU'...\|..1t.y...{....w..y.s.+.t5.A.J.............$...}...k.......tu........;Vf...]...\|.Q......Z.].^...q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+..*T.....p....S...qR..+K1@k..mkQo...A........]p_.X2........B.....I..3..7..]d....@.bX....z.g...\|..V-K[..^(..y...^N.^..oJF.kQ.P.R..F..om.B.pL.<F....R...(..i..,......I.F< ..T...`1.W3....L....+.S.M.c....110..........H....E,O..v..l..=...H$.J..J....4.C..dzPI..S.B@RJ.V>..GJ."/.eEwC..Q}d.k......KN\|.i...=.....!.V....<%J.D......b

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.945787382366693
Encrypted:	false
SSDEEP:	3:yionv//thPnFuXf8Lts7CX9/gm6Kp0syxtuIdsvFQAahUMZ/jp:6v/lhPBR/C+aNuqsvFQA0UMpp
MD5:	3EDA15637AFEAC6078F56C9DCC9BBDB8
SHA1:	97B900884183CB8CF99BA069EEDC280C599C1B74
SHA-256:	68C66D144855BA2BC8B8BEE88BB266047367708C1E281A21B9D729B1FBD23429
SHA-512:	06B21827589FCAF63B085DB2D662737B24A39A697FF9138BDF188408647C3E90784B355F2B8390160CA487992C033CE735599271EE35873E1941812AB6C34B52
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8026.24/resources/images/0/sprite1.mouse.png
Preview:	.PNG........IHDR...X..........x......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK..1......Om.O ...j.a...\BW....IEND.B`.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
Category:	dropped
Size (bytes):	254
Entropy (8bit):	7.066074991728423
Encrypted:	false
SSDEEP:	6:XtS8G99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:XAH99kRX1YQBDFCnDXdWYtrE
MD5:	847A4212B99B9076EE39328B24CD30AF
SHA1:	73F15078CF1D396485F644A79B6E25EF0637685D
SHA-256:	29DC0C26C372805325EB7EB926769E832A60B47BEF96A66436EC3EC05CD6128E
SHA-512:	9AF77E9ED8BD9A39A47F36AAC2D01B5AF5D56C04CD933427DF95CC80904D7EE7AC3F7F9443D8AEF236CC84FB4DC4CC335AF0BF8F9BC0C13D720187096D149220
Malicious:	false
Reputation:	low
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113401
Category:	downloaded
Size (bytes):	20414
Entropy (8bit):	7.979508934961097
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IMU7ULgCsHqZo9v8:9CGEiL/w7R8DW9Z5BU7UMZHqok
MD5:	48981D3CF57E7C58CA7E3E851EF9354E
SHA1:	73593DE7633B10F9FFD0EF0E46280FA40FF433FF
SHA-256:	8A5E756923CC5C3F013862427B7622F58A52501C5A6017FFF2FDB2AFD94A10C2
SHA-512:	4E2B6EA222CE77E6EC12E059362DDDEA13758CDC77259FF5CF449BED5A1677E112CF49CD7ED7B1378F96FFD7C5E21BE66D2CA7EB2A9CD8026732F867FB5AE8B1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	17453
Entropy (8bit):	3.890509953257612
Encrypted:	false
SSDEEP:	192:P7FRTHQpmA3ZkXOL25cYty7l6UWUjMJBSab/vR+yzP:P/cpmgkF5+JWUjMp40P
MD5:	7916A894EBDE7D29C2CC29B267F1299F
SHA1:	78345CA08F9E2C3C2CC9B318950791B349211296
SHA-256:	D8F5AB3E00202FD3B45BE1ACD95D677B137064001E171BC79B06826D98F1E1D3
SHA-512:	2180ABE47FBF76E2E0608AB3A4659C1B7AB027004298D81960DC575CC2E912ECCA8C131C6413EBBF46D2AAA90E392EB00E37AED7A79CDC0AC71BA78D828A84C7
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (994), with no line terminators
Category:	downloaded
Size (bytes):	994
Entropy (8bit):	4.934955158256183
Encrypted:	false
SSDEEP:	12:U8Chx3fpler8DDMv1+I+zpcuVkicq32EXgBA5e2KMLT:JC3G0z1Ddf2NGe2KG
MD5:	E2110B813F02736A4726197271108119
SHA1:	D7AC10CC425A7B67BF16DDA0AAEF1FEB00A79857
SHA-256:	6D1BE7ED96DD494447F348986317FAF64728CCF788BE551F2A621B31DDC929AC
SHA-512:	E79CF6DB777D62690DB9C975B5494085C82E771936DB614AF9C75DB7CE4B6CA0A224B7DFB858437EF1E33C6026D772BE9DBBB064828DB382A4703CB34ECEF1CF
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8026.24/resources/images/0/sprite1.mouse.css
Preview:	.image-loading_blackbg-gif{background:url('loading_blackbg.gif');width:16px;height:16px}.image-loading_whitebg-gif{background:url('loading_whitebg.gif');width:16px;height:16px}.image-thinking16_blue-gif{background:url('thinking16_blue.gif');width:16px;height:16px}.image-thinking16_grey-gif{background:url('thinking16_grey.gif');width:16px;height:16px}.image-thinking16_white-gif{background:url('thinking16_white.gif');width:16px;height:16px}.image-thinking24-gif{background:url('thinking24.gif');width:24px;height:24px}.image-thinking32_blue-gif{background:url('thinking32_blue.gif');width:32px;height:32px}.image-thinking32_grey-gif{background:url('thinking32_grey.gif');width:32px;height:32px}.image-thinking32_white-gif{background:url('thinking32_white.gif');width:32px;height:32px}.image-clear1x1-gif{width:1px;height:1px;background:url('sprite1.mouse.png') -0 -0}.csimg{padding:0;border:none;background-repeat:no-repeat;-webkit-touch-callout:none}span.csimg{-ms-high-contrast-adjust:none}

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	232394
Entropy (8bit):	5.54543362321178
Encrypted:	false
SSDEEP:	1536:yldzLx/ivZfjbOv/LBbLeXeKEXK81KKVKKdKbSK0cKcyKf75DMkvqBCWcDAPf4bT:Ux/ivZfjbOv/LBbLMTq9cDw4bLl1We/
MD5:	AF8D946B64D139A380CF3A1C27BDBEB0
SHA1:	C76845B6FFEAF14450795C550260EB618ABD60AB
SHA-256:	37619B16288166CC76403F0B7DF6586349B2D5628DE00D5850C815D019B17904
SHA-512:	C5CFB514F993310676E834C8A5477576BD57C82A8665387F9909BA0D4C3C2DE693E738ACAA74E7B4CA20894EA2FEEA5CF9A2428767D03FE1DE9C84538FDC3EE9
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8026.24/resources/styles/0/boot.worldwide.mouse.css
Preview:	.feedbackList{-webkit-animation-duration:.17s;-moz-animation-duration:.17s;animation-duration:.17s;-webkit-animation-name:feedbackListFrames;-moz-animation-name:feedbackListFrames;animation-name:feedbackListFrames;-webkit-animation-fill-mode:both;-moz-animation-fill-mode:both;animation-fill-mode:both}@-webkit-keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-webkit-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@-moz-keyframes feedbackListFrames{from{-moz-transform:scale(1,1);transform:scale(1,1);-moz-animation-timing-function:cubic-bezier(.33,0,.67,1);animation-timing-function:cubic-bezier(.33,0,.67,1)}to{-moz-transform:scale(1.03,1.03);transform:scale(1.03,1.03)}}@keyframes feedbackListFrames{from{-webkit-transform:scale(1,1);-moz-transform:scale(1,1);transform:scale(1,1);-webkit-animation-timing-function:cubic-bezier(.33,0,.67,

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	660449
Entropy (8bit):	5.4121922690110535
Encrypted:	false
SSDEEP:	12288:3PUKyvwjOOvwZ1ARuxntuicBh8hS11dsUA:yvjZ+/pIUA
MD5:	D9E3D2CE0228D2A5079478AAE5759698
SHA1:	412F45951C6AEDA5F3DF2C52533171FC7BDD5961
SHA-256:	7041D585609800051E4F451792AEC2B8BD06A4F2D29ED6F5AD8841AAE5107502
SHA-512:	06700C65BEF4002EBFBFF9D856C12E8D71F408BACA2D2103DDE1C28319B6BD3859FA9D289D8AEB6DD484E802040F6EE537F31F97B4B60A6B120A6882C992207A
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8026.24/scripts/boot.worldwide.3.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.3.mouse.js'] = (new Date()).getTime();..;_n.a.jR=function(n){return n.dS()};_n.a.jZ=function(n){return n.eh()};_n.a.jP=function(n){return n.cC()};_n.a.jQ=function(n){return n.ca()};_n.a.hZ=function(n){return n.dO};_n.a.jU=function(n){return n.ed()};_n.a.jT=function(n){return n.ea()};_n.a.kb=function(n){return n.ej()};_n.a.hM=function(n){return 300};_n.a.fh=function(n){return n.V};_n.a.jV=function(n){return n.bI()};_n.a.ie=function(n){return n.mh()};_n.a.km=function(n){return n.bl()};_n.a.ka=function(n){return n.ei()};_n.a.ko=function(n){return n.cV()};_n.a.eX=function(n){return _y.E.isInstanceOfType(n)?n.y:null};_n.a.jN=function(n){return n.c()};_n.a.gm=function(n){return n.b()};_n.a.jM=function(n){return n.b()};_n.a.ib=function(n){return n.jM()};_n.a.iq=function(n){return n.bG};_n.a.iX=function(n){return _n.V.isInstanceOfType(n)?n

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	dropped
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
Category:	downloaded
Size (bytes):	662286
Entropy (8bit):	5.315860951951661
Encrypted:	false
SSDEEP:	12288:YfmmzLJTD/JilMGk4hBR310FaHHxpJy7qVfb4cSPo:Yfm+T7US7SR310FaHHTJy7qJ4rPo
MD5:	12204899D75FC019689A92ED57559B94
SHA1:	CCF6271C6565495B18C1CED2F7273D5875DBFB1F
SHA-256:	39DAFD5ACA286717D9515F24CF9BE0C594DFD1DDF746E6973B1CE5DE8B2DD21B
SHA-512:	AA397E6ABD4C54538E42CCEDA8E3AA64ACE76E50B231499C20E88CF09270AECD704565BC9BD3B27D90429965A0233F99F27697F66829734FF02511BD096CF030
Malicious:	false
Reputation:	low
URL:	https://r4.res.office365.com/owa/prem/15.20.8048.16/scripts/boot.worldwide.2.mouse.js
Preview:	.window.scriptsLoaded = window.scriptsLoaded \|\| {}; window.scriptProcessStart = window.scriptProcessStart \|\| {}; window.scriptProcessStart['boot.worldwide.2.mouse.js'] = (new Date()).getTime();.._y.lC=function(){};_y.lC.registerInterface("_y.lC");_y.jw=function(){};_y.jw.registerInterface("_y.jw");_y.lA=function(){};_y.lA.registerInterface("_y.lA");var IDelayedSendEvent=function(){};IDelayedSendEvent.registerInterface("IDelayedSendEvent");var IIsShowingComposeInReadingPaneEvent=function(){};IIsShowingComposeInReadingPaneEvent.registerInterface("IIsShowingComposeInReadingPaneEvent");var ISendFailedO365Event=function(){};ISendFailedO365Event.registerInterface("ISendFailedO365Event");var ISendFailureRemoveO365Event=function(){};ISendFailureRemoveO365Event.registerInterface("ISendFailureRemoveO365Event");_y.gw=function(){};_y.gw.registerInterface("_y.gw");_y.iB=function(){};_y.iB.registerInterface("_y.iB");_y.ih=function(){};_y.ih.registerInterface("_y.ih");_y.jy=function(){};_y.jy.regis

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5139
Entropy (8bit):	7.865234009830226
Encrypted:	false
SSDEEP:	96:oX2DsRVNYc82nTGTirCPqKO1gDPFjDiwK3aM5yO/bUlVV6JKo5N9jIMw7RLW1ZHb:ofRgc82nTprQsgDNDP7QgVVoH9+kMK9
MD5:	8B36337037CFF88C3DF203BB73D58E41
SHA1:	1ADA36FA207B8B96B2A5F55078BFE2A97ACEAD0E
SHA-256:	E4E1E65871749D18AEA150643C07E0AAB2057DA057C6C57EC1C3C43580E1C898
SHA-512:	97D8CC97C4577631D8D58C0D9276EE55E4B80128080220F77E01E45385C20FE55D208122A8DFA5DADCB87543B1BC291B98DBBA44E8A2BA90D17C638C15D48793
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...V...H.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DB120779422011EA9888910153D3A5E6" xmpMM:DocumentID="xmp.did:DB12077A422011EA9888910153D3A5E6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DB120777422011EA9888910153D3A5E6" stRef:documentID="xmp.did:DB120778422011EA9888910153D3A5E6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.WI....IDATx..]]l.......(.5.K0P..0...E.qT..J X)F.(5X....J.}(m.R5.Q...RUEUPU~.....qp@.b......L...k.m"0......"c.3

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
Category:	downloaded
Size (bytes):	628
Entropy (8bit):	7.6610853322771
Encrypted:	false
SSDEEP:	12:X6/EjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X6cP5e3dgYLMk69Ii1epryt/Md
MD5:	6F68E9881DF18F8E251AB57D5786239B
SHA1:	C0F7A01A288752833390FC330995F25488BCE8EC
SHA-256:	B33E30351B2F4EF67D53D2C6DBE189A4D572425037E4F1264A0190DC4A820845
SHA-512:	B33DFF67480DF940FA0565B231E02F26840DCB5135A4A2FF3C310AA062D3D4B456FA9C8C6E2BC59EC76B515EA1B36D574A5701771BCEE7CEE97B99EF60A803C6
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 8, 2024 21:21:02.484596968 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:02.484596968 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:02.765866995 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:09.742007017 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:09.742073059 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:09.742141962 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:09.742811918 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:09.742829084 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:10.542864084 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:10.542938948 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:10.549217939 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:10.549233913 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:10.549488068 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:10.551457882 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:10.551573992 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:10.551580906 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:10.551755905 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:10.595407009 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:10.727729082 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:10.727817059 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:10.727869987 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:10.728360891 CEST	49713	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:10.728378057 CEST	443	49713	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:10.832729101 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:10.832755089 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:10.832865000 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:10.833126068 CEST	49717	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:10.833151102 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:10.833199978 CEST	49717	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:10.833372116 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:10.833381891 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:10.833590031 CEST	49717	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:10.833602905 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.658231974 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.658740044 CEST	49717	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.658759117 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.659851074 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.659917116 CEST	49717	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.659928083 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.659965992 CEST	49717	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.660178900 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.665312052 CEST	49717	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.665381908 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.665535927 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.665548086 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.665738106 CEST	49717	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.665746927 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.667099953 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.667180061 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.667191029 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.667232037 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.668155909 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.668234110 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.716025114 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.716038942 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.762825966 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.763674974 CEST	49717	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.869514942 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.869534969 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.869550943 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.869570017 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.869576931 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.869658947 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:11.869672060 CEST	49717	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.869720936 CEST	49717	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.871726990 CEST	49717	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:11.871752977 CEST	443	49717	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:12.089940071 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:12.096041918 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:12.378412962 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:13.073812962 CEST	49721	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:21:13.073870897 CEST	443	49721	142.250.181.228	192.168.2.6
Oct 8, 2024 21:21:13.073949099 CEST	49721	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:21:13.074256897 CEST	49721	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:21:13.074273109 CEST	443	49721	142.250.181.228	192.168.2.6
Oct 8, 2024 21:21:13.083853006 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.083921909 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.083996058 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.084839106 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.084863901 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.711266994 CEST	443	49721	142.250.181.228	192.168.2.6
Oct 8, 2024 21:21:13.711903095 CEST	49721	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:21:13.711925983 CEST	443	49721	142.250.181.228	192.168.2.6
Oct 8, 2024 21:21:13.713501930 CEST	443	49721	142.250.181.228	192.168.2.6
Oct 8, 2024 21:21:13.713567019 CEST	49721	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:21:13.715001106 CEST	49721	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:21:13.715100050 CEST	443	49721	142.250.181.228	192.168.2.6
Oct 8, 2024 21:21:13.727982044 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.728328943 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.728383064 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.729334116 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.729403019 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.730710030 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.730777979 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.731050968 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.731069088 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.765486002 CEST	49721	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:21:13.765501022 CEST	443	49721	142.250.181.228	192.168.2.6
Oct 8, 2024 21:21:13.779417992 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.810638905 CEST	49721	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:21:13.855609894 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.855892897 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.855914116 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.855952978 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.855964899 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.856029034 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.856065989 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.856095076 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.856095076 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.856126070 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.940818071 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.940872908 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.940917969 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.940964937 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.940996885 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.941019058 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.943190098 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.943234921 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.943269014 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.943281889 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.943308115 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.943334103 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.943481922 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.943552971 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.943563938 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.943622112 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:13.943677902 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.950581074 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:13.950618982 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:14.128972054 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 8, 2024 21:21:14.129208088 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:15.552403927 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:15.552444935 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:15.552586079 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:15.553809881 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:15.553823948 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:15.636204958 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:15.636255026 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:15.636444092 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:15.672662973 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:15.672697067 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:15.736962080 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:15.736988068 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:15.737056017 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:15.737802982 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:15.737812996 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:15.739036083 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:15.739057064 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:15.739403009 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:15.745552063 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:15.745568037 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:15.855230093 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:15.855273008 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:15.855412006 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:15.857038021 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:15.857055902 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:16.231729031 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.231800079 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.235023022 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.235049009 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.235147953 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.235486984 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.235496998 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.251712084 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.251730919 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.252650976 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.297497988 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.312114954 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.359395981 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.409126043 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.409590006 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.409612894 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.409817934 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.409889936 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.409912109 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.409941912 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.409945011 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.409956932 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.409971952 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.410012960 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.410020113 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.410039902 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.411029100 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.411087036 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.411480904 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.418976068 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.419440031 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.419450998 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.422976017 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.423043013 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.423585892 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.423666954 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.423758030 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.423765898 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.454261065 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.455401897 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.467307091 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.495619059 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.495652914 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.495687008 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.495703936 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.495724916 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.495742083 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.495759964 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.495762110 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.495781898 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.495803118 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.496995926 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.497049093 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.497090101 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.497101068 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.497137070 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.497157097 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.504656076 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:16.504728079 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:16.510050058 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:16.510057926 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:16.510261059 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:16.511665106 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.511725903 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.511770964 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.511801004 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.511825085 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.511883974 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.511883974 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.521888971 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.521946907 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.521967888 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.522005081 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.522020102 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.522049904 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.522054911 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.522083998 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.522100925 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.561466932 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:16.581960917 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.582030058 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.582051992 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.582066059 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.582113028 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.582618952 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.582676888 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.582689047 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.582706928 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.582734108 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.582751989 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.583972931 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.584001064 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.584043026 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.584049940 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.584100962 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.585032940 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.585059881 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.585099936 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.585109949 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.585163116 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.595937967 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.595983028 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.596024036 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.596065044 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.607635021 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.607705116 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.607741117 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.607752085 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.607795000 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.607816935 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.609272957 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.609319925 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.609355927 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.609364033 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.609417915 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.663436890 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.663480043 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.668673992 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.668742895 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.668767929 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.668782949 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.668813944 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.668837070 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.669243097 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.669292927 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.669312000 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.669322968 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.669359922 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.669380903 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.669966936 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.670011044 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.670028925 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.670037985 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.670079947 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.670079947 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.670371056 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.670425892 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.670435905 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.670455933 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.670475960 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.670500040 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.671423912 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.671473980 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.671638966 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.671638966 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.671648979 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.671684027 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.672166109 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.672209978 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.672225952 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.672235012 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.672262907 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.672281981 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.672362089 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.672434092 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.672440052 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.672477961 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.672527075 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.672574043 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.695507050 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.695529938 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.695573092 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.695584059 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.695611954 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.695631027 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.695683002 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.695698023 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.695734978 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.695740938 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.695765018 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.695782900 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.696466923 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.696492910 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.696552992 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.696561098 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.696597099 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.697936058 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.697952986 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.697992086 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.697999001 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.698055983 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.698055983 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.790081978 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.790155888 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.790160894 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.790208101 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.809122086 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.838684082 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:16.838705063 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.912919044 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:16.917632103 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.919231892 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.919239998 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.919253111 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:16.919256926 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:16.952918053 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.039628983 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.039644003 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.041232109 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.041347027 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.042119026 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.042119026 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.042360067 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.088629007 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.088643074 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.112732887 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.112791061 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.112907887 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.113347054 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.113378048 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.140474081 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.140489101 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.140677929 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.140690088 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.140701056 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.140707016 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.140734911 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.140763998 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.140763998 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.140775919 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.140803099 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.166831017 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:17.188702106 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.211409092 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:17.226583958 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.226617098 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.226656914 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.226675987 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.226690054 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.226699114 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.226733923 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.226743937 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.226768017 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.226777077 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.227005005 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.228121996 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.228153944 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.228194952 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.228243113 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.228244066 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.228255987 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.228277922 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.228295088 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.228331089 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.228341103 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.228497982 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.228502989 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.228682995 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.281541109 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.281570911 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:17.281783104 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.307881117 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.307944059 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:17.308448076 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.308482885 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:17.308576107 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.308686972 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.330095053 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.330142975 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:17.330394030 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.331801891 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.331835985 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:17.332283974 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.332284927 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.332292080 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:17.332302094 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:17.348324060 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.348352909 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:17.352395058 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:17.352463007 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:17.352595091 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:17.607891083 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:17.607924938 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:17.608047962 CEST	49733	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:17.608053923 CEST	443	49733	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:17.612983942 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.613019943 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:17.613823891 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.616688967 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:17.616703987 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:17.621037006 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.621049881 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.650537968 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.650584936 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.650887966 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.651295900 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.651314020 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.697012901 CEST	49745	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:17.697038889 CEST	443	49745	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:17.697251081 CEST	49745	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:17.698075056 CEST	49745	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:17.698100090 CEST	443	49745	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:17.794132948 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.794404030 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.794415951 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.795865059 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.796292067 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.796292067 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.796381950 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.796490908 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.841013908 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:17.841027975 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:17.888310909 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.177552938 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.177589893 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.177599907 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.177618980 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.177632093 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.177643061 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.177644968 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.177675009 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.177704096 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.177725077 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.179153919 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.179837942 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.179848909 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.179869890 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.179903030 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.179918051 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.179945946 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.179960012 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.180341959 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.180382967 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.180706024 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.183279037 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.183300972 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.183490992 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.183510065 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.183556080 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.183568001 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.183594942 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.183609009 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.185103893 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.185110092 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.185444117 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.185482025 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.185504913 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.185516119 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.185540915 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.185542107 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.185559034 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.185590029 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.190222979 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.190248013 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.191159964 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.191168070 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.191430092 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.191448927 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.192199945 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.192208052 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.207149982 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.207164049 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.235966921 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.254097939 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.254108906 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.255316019 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.255321026 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.279035091 CEST	49746	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:18.279066086 CEST	443	49746	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:18.279213905 CEST	49746	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:18.280208111 CEST	49746	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:18.280220985 CEST	443	49746	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:18.282766104 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.282913923 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.282974005 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.283572912 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.283586025 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.283597946 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.283603907 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.287255049 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.287427902 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.287483931 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.287775040 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.287866116 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.287894964 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.287894964 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.287914038 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.287925959 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.287945986 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.288961887 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.288995028 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.290047884 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.290082932 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.290147066 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.290308952 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.290322065 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.293697119 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.293715000 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.293766022 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.293777943 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.293880939 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.294939995 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.294939995 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.294949055 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.294958115 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.299999952 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.300034046 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.300158978 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.300389051 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.300410032 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.304534912 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.304552078 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.304790974 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.304899931 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.304909945 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.352886915 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.352951050 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.353045940 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.353070974 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.353079081 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.353110075 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.353141069 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.366625071 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.367475986 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.371512890 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.371530056 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.372920036 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.373518944 CEST	443	49745	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:18.373588085 CEST	49745	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:18.373785019 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.373930931 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.373971939 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.374587059 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.374603987 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.374614000 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.374619007 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.376315117 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.376358986 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.376854897 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.376862049 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.378249884 CEST	49745	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:18.378256083 CEST	443	49745	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:18.378463984 CEST	443	49745	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:18.379642010 CEST	49745	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:18.381383896 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.381409883 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.381469011 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.383951902 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.383965969 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.421073914 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.427414894 CEST	443	49745	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:18.462018967 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.462301016 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.462330103 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.462677002 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.463221073 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.463289022 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.463398933 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.473012924 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.473036051 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.473082066 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.473093987 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.473138094 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.473273039 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.473326921 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.473349094 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.473366976 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.473400116 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.473406076 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.473427057 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.473428011 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.473454952 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.473455906 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.473473072 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.473507881 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.473965883 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.473965883 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.473984003 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.473994970 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.480257988 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.480309010 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.480362892 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.480703115 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.480719090 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.507407904 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.557733059 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.557801962 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.557971954 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.557972908 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.558017015 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.558073044 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.559588909 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.559648991 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.559686899 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.559705973 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.559736013 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.559753895 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.572253942 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.572271109 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.572283983 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.572324991 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.572345018 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.572357893 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.572365999 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.572592974 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.572592974 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.621309996 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.621376038 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.628609896 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.628644943 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.628710032 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.629153013 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.629169941 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.644001961 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.644068003 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.644100904 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.644123077 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.644155025 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.644198895 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.644948959 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.644994020 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.645028114 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.645040035 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.645071030 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.645087957 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.646008015 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.646050930 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.646090031 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.646107912 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.646138906 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.646163940 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.647305012 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.647367954 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.647381067 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.647420883 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.647445917 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.647483110 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.647775888 CEST	443	49745	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:18.647942066 CEST	443	49745	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:18.647998095 CEST	49745	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:18.730325937 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.730422020 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.730426073 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.730473995 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.914477110 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.914520979 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.914582968 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.918215036 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.918235064 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.926136971 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.928638935 CEST	49744	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:18.928673029 CEST	443	49744	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:18.934098005 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.934125900 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.934154987 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.934794903 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.934801102 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.935458899 CEST	49755	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:18.935503960 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:18.935556889 CEST	49755	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:18.935743093 CEST	49755	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:18.935765028 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:18.935899019 CEST	49745	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:18.935909986 CEST	443	49745	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:18.935924053 CEST	49745	443	192.168.2.6	184.28.90.27
Oct 8, 2024 21:21:18.935930967 CEST	443	49745	184.28.90.27	192.168.2.6
Oct 8, 2024 21:21:18.938549042 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.938580036 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:18.939171076 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:18.939182043 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.190571070 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.191298962 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.191322088 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.192253113 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.192257881 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.192409039 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.193077087 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.193149090 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.193511009 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.193525076 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.193978071 CEST	443	49746	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:19.194082022 CEST	49746	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:19.194472075 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.195919037 CEST	49746	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:19.195928097 CEST	443	49746	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:19.196162939 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.196171999 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.196263075 CEST	443	49746	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:19.196644068 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.197405100 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.197483063 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.197585106 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.198721886 CEST	49746	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:19.199146032 CEST	49746	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:19.199151993 CEST	443	49746	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:19.199194908 CEST	49746	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:19.239417076 CEST	443	49746	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:19.243402958 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.277614117 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.277725935 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.277800083 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.278081894 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.278100967 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.278124094 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.278134108 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.280869961 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.280986071 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.281138897 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.281584024 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.281640053 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.281711102 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.281734943 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.281737089 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.281877041 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.281893015 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.284172058 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.284199953 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.284401894 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.284441948 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.284447908 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.299477100 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.299561024 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.299706936 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.299813032 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.299823046 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.299834013 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.299839020 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.302238941 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.302248001 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.302275896 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.302326918 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.302390099 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.302392006 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.302489996 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.302498102 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.302556038 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.302556038 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.302562952 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.302572012 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.302680016 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.302747011 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.302791119 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.302831888 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.302840948 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.302881002 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.302881002 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.305531979 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.305547953 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.305600882 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.305722952 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.305737019 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.366702080 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.367285013 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.367327929 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.367769957 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.367778063 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.379584074 CEST	443	49746	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:19.379996061 CEST	443	49746	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:19.380059958 CEST	49746	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:19.380956888 CEST	49746	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:19.380956888 CEST	49746	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:19.380969048 CEST	443	49746	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:19.389580011 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.390980005 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.391004086 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.392333031 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.392806053 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.392956018 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.392975092 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.393562078 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.393632889 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.393671989 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.393688917 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.393723011 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.393768072 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.395447969 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.395503044 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.395538092 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.395545959 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.395627975 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.435420990 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.437855005 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.467161894 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.467226028 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.467314005 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.467588902 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.467590094 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.467638016 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.467664957 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.470551014 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.470602989 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.470796108 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.470935106 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.470947027 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.485152960 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.485222101 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.485229969 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.485258102 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.485294104 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.485294104 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.485383987 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.485425949 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.485651970 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.485671043 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.496179104 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.496207952 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.496216059 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.496238947 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.496263027 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.496265888 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.496280909 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.496294975 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.496295929 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.496318102 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.496330023 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.497471094 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.497483969 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.565278053 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.565531015 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.565570116 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.566050053 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.566713095 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.566797972 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.567045927 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.611412048 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.689780951 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.689836979 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.689874887 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.689903975 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.689928055 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.689948082 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.689986944 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.778004885 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.778075933 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.778111935 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.778130054 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.778165102 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.778175116 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.780468941 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.780528069 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.780560017 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.780569077 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.780601978 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.780613899 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.865143061 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.865175009 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.865247011 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.865278006 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.865299940 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.865319967 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.865842104 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.865863085 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.865891933 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.865900993 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.865925074 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.865940094 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.867117882 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.867139101 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.867172956 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.867182016 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.867204905 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.867218018 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.868006945 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.868026972 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.868052959 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.868061066 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.868084908 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.868096113 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.868098021 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.868109941 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.868146896 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.868155003 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.868195057 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:19.868231058 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.913820982 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:19.937210083 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.956715107 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.959696054 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.973387003 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:19.982218981 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:19.988801956 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:20.006400108 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.006417990 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.022656918 CEST	49755	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:20.022699118 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:20.026582956 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:20.026622057 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.026657104 CEST	49755	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:20.026680946 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:20.028609037 CEST	49755	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:20.033579111 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.064790964 CEST	49755	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:20.064868927 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:20.065893888 CEST	49755	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:20.065900087 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:20.075309992 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.075324059 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.097044945 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.097069025 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.100548983 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.100567102 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.100970984 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.100981951 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.103532076 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.103543997 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.103910923 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.103915930 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.104264975 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.104276896 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.104790926 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.104801893 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.105099916 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.105104923 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.105604887 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.105607986 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.108741999 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.108774900 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.109469891 CEST	49755	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:20.119201899 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.119225979 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.119321108 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.119504929 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.119510889 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.179498911 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.179514885 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.179677963 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.179894924 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.179904938 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.180413008 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.180450916 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.180577993 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.180783987 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.180833101 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.180990934 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.181015015 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.181021929 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.181179047 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.181200027 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.181838036 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.181868076 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.181969881 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.182869911 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.182885885 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.193583012 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.193665981 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.193746090 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.194216967 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.194227934 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.194396973 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.194621086 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.194633961 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.195319891 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.195343971 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.195498943 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.195517063 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.201163054 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.201196909 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.201258898 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.201459885 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.201483011 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.202886105 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.203031063 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.203099012 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.203320026 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.203339100 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.203361988 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.203373909 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.203461885 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.203538895 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.203587055 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.203700066 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.203700066 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.203708887 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.203716993 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.203751087 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.203814983 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.203865051 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.204644918 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.204644918 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.204663038 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.204683065 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.209362030 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.209389925 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.209526062 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.210216999 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.210231066 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.210251093 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.210279942 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.210340023 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.210443974 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.210457087 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.211379051 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.211399078 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.211488962 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.211564064 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.211581945 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.235932112 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.235997915 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.236160040 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.236278057 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.236284018 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.236293077 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.236296892 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.237679005 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.237704992 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.237786055 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.238004923 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.238018036 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.239938974 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.239985943 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.240062952 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.240334988 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.240356922 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.260171890 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:20.260204077 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:20.260267019 CEST	49755	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:20.260278940 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:20.260322094 CEST	49755	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:20.260509014 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:20.260566950 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:20.260653019 CEST	49755	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:20.263077021 CEST	49755	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:20.263087034 CEST	443	49755	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:20.795280933 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.795663118 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.795674086 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.796766996 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.797194004 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.797344923 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.797358990 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.823067904 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.830166101 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.840845108 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.843730927 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.847167015 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.847184896 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.847356081 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.847366095 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.847457886 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.847476959 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.847841978 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.848423004 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.848511934 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.848582983 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.848721981 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.849083900 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.849164009 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.849174976 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.849179983 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.849229097 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.849257946 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.849875927 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.849965096 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.850091934 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.850100040 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.873591900 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.874207020 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.874233007 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.874732018 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.874737024 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.878272057 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.878684998 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.878700018 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.879098892 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.879105091 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.880949974 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.881249905 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.881273031 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.881596088 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.881601095 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.891417027 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.892216921 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.892225981 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.895765066 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.895989895 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.896001101 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.896857023 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.896918058 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.897222042 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.897274017 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.897360086 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.897371054 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.908452988 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.908773899 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.908793926 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.909239054 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.909245014 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.909543037 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.909879923 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.909934998 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.910259962 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.910274029 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.919903040 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.922636986 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.922652006 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.923852921 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.923916101 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.924263954 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.924314976 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.924401999 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.924407959 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.937603951 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.945835114 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.945859909 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.945867062 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.945897102 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.945919037 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.945919037 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.945935011 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.945956945 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.945977926 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.961128950 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.961204052 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.961267948 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.962030888 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.962057114 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.962513924 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.962539911 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.962599039 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.963145018 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.963155031 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.966861010 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.966882944 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.967041016 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.967216969 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.967226028 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.967756987 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.971338034 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.971370935 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.971405983 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.971422911 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.971430063 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.971456051 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.971470118 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.971476078 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.971514940 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.971519947 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.971534014 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.971570015 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.972047091 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.972057104 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.976635933 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.976661921 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.976711988 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.976926088 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:20.976938963 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:20.977878094 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.977945089 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.978044033 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.978250027 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.978260994 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.978321075 CEST	49770	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.978326082 CEST	443	49770	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.980328083 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.980382919 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.980454922 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.980766058 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.980777025 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.980792999 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.980798006 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.984468937 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.984518051 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.984563112 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.984896898 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.984908104 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.985076904 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.985090017 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.985110044 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.985318899 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.985332012 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.985388994 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.985738993 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.985749960 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.985825062 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.985833883 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.987904072 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.987921000 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:20.988037109 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.988553047 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:20.988560915 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.008794069 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.008842945 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.008910894 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.009080887 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.009089947 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.009107113 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.009113073 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.011759996 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.011809111 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.011898994 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.012053967 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.012072086 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.015420914 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.015461922 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.015522957 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.016345024 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.016359091 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.016582966 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.016592026 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.019010067 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.019054890 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.019330025 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.019465923 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.019484997 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.032421112 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.032439947 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.032526016 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.032531023 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.033500910 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.037076950 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.037095070 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.037147045 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.037147999 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.037204981 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.037381887 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.037409067 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.037899017 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.037910938 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.039417982 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.039424896 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.039771080 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.043423891 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.043443918 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.043719053 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.043719053 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.043731928 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.103238106 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.103265047 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.103272915 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.103308916 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.103338003 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.103351116 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.103373051 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.103405952 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.103411913 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.103424072 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.103446007 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.104753017 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.104764938 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.116024017 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.116064072 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.116199970 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.116357088 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.116368055 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.122144938 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.122210979 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.122242928 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.122251034 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.122292995 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.122292995 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.123538971 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.123595953 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.123634100 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.123637915 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.124085903 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.124085903 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.125294924 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.125339985 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.125391006 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.125402927 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.125529051 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.125529051 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.126759052 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.127188921 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.127222061 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.128690004 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.128707886 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.128762007 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.128770113 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.128851891 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.128851891 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.128858089 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.128873110 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.129031897 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.129059076 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.129093885 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.129177094 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.129221916 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.129317045 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.129990101 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.129997969 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.171035051 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.171062946 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.220026016 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.225384951 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.225841045 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.225895882 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.225905895 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.226093054 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.227586031 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.227605104 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.229608059 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.229923010 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.229989052 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.231364965 CEST	49764	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.231379986 CEST	443	49764	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.255299091 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.255403042 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.255520105 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.256035089 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.256083965 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.258691072 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.258716106 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.258788109 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.259423018 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.259443045 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.605851889 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.606118917 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.606132030 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.606604099 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.606949091 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.607027054 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.607084036 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.616662979 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.616871119 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.616890907 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.617983103 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.618269920 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.618371964 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.618382931 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.618441105 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.625765085 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.625953913 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.625979900 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.626451015 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.626739025 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.626825094 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.626840115 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.633258104 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.633830070 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.633852959 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.634314060 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.634320974 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.647409916 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.667404890 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.674413919 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.674880028 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.685389996 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.686858892 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.686876059 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.687536955 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.687542915 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.694118977 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.694693089 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.694724083 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.695399046 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.695413113 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.701843023 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.702261925 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.702286959 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.703785896 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.703793049 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.705979109 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.706129074 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.706176043 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.706645012 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.707325935 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.707350969 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.708075047 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.708093882 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.708256960 CEST	49776	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.708268881 CEST	443	49776	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.710556030 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.710935116 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.710943937 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.714257956 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.714373112 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.714807034 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.714807034 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.714865923 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.721020937 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.721084118 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.721105099 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.721126080 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.721155882 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.721163988 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.721184015 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.721196890 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.721211910 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.721219063 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.721237898 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.721260071 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.729231119 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.729257107 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.729266882 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.729307890 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.729321957 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.729346037 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.729357004 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.729368925 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.729402065 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.729409933 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.729451895 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.730241060 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.730256081 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.734302044 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.734472036 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.734539032 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.734841108 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.734850883 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.734862089 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.734869003 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.739005089 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.739039898 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.739114046 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.739267111 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.739278078 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.761459112 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.761464119 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.810554981 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.822591066 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.823007107 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.823015928 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.824711084 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.824841976 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.825134993 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.825211048 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.825228930 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.843333960 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.843434095 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.843435049 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.843466043 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.843521118 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.843543053 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.843605995 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.843668938 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.843681097 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.843734026 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.843765020 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.843811989 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.865442991 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.865456104 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.870506048 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.870522022 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.884248972 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.884285927 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.884365082 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.884823084 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.884838104 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.885545015 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.885617018 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.885725021 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.885726929 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.885867119 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.885916948 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.886101007 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.886130095 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.886143923 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.886153936 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.886526108 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.886526108 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.886538982 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.886548996 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.894047022 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.894084930 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.894212008 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.894313097 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.894323111 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.894416094 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.894623995 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.894634962 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.894731045 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.894737959 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.901828051 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.901855946 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.901861906 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.901901960 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.901906967 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.902458906 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.902797937 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.902848005 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.903340101 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.903347969 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.903446913 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.903565884 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.903588057 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.903600931 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.903606892 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.907113075 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.907949924 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.907963037 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.908052921 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.908195019 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.908205032 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.910063028 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.910128117 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.910219908 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.911324978 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.911333084 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.911355019 CEST	49779	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.911364079 CEST	443	49779	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.914824009 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.914864063 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.914942026 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.915110111 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:21.915128946 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:21.936914921 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.936942101 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.936953068 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.936975002 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.936984062 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.936986923 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.936991930 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.937005043 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.937038898 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.937038898 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.937047958 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.937058926 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.937109947 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.937117100 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.937127113 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.937392950 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.939243078 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.939253092 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.963996887 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.964366913 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.964374065 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.965558052 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.965641022 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.966171980 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.966237068 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.966319084 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.968126059 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.969789982 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.969796896 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.971529007 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.971585989 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.972114086 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.972193003 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:21.972270966 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:21.972276926 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.007431984 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.015131950 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.015217066 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.015233040 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.062170029 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.065510035 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.066073895 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.066131115 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.066144943 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.066199064 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.066420078 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.067311049 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.067344904 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.068900108 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.069192886 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.069272041 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.069871902 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.069888115 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.478410959 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.529711962 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.572649956 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.575222969 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.579153061 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.593519926 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.600131989 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.618192911 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.618208885 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.618690968 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.629975080 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.632586002 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.637988091 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.638103008 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.641891956 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.642160892 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.646375895 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.683417082 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.728092909 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.728101015 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.728885889 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.728892088 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.729443073 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.729466915 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.730096102 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.730103970 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.730308056 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.730328083 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.731606007 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.731611967 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.731978893 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.732002974 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.732412100 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.732425928 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.732870102 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.732880116 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.733236074 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.733242989 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.742857933 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.742919922 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.742940903 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.742980957 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.742986917 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.743020058 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.743022919 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.743042946 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.743042946 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.743069887 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.743092060 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.840739965 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.840781927 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.840850115 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.840866089 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.840903997 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.840919018 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.841048956 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.841099977 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.841109037 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.841150045 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.841208935 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.845876932 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:22.845892906 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:22.850644112 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.850682020 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.850717068 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.850759029 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.850764036 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.850816965 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.851829052 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.851855993 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.851871967 CEST	49789	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.851878881 CEST	443	49789	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.852170944 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.852319956 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.852385044 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.852699041 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.852781057 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.852823973 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.853270054 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.853279114 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.853348017 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.853353977 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.854541063 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.854567051 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.854581118 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.854588032 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.855901957 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.855942011 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.855968952 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.855983973 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.890894890 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.890964031 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.891108036 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.896152020 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.896264076 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.896330118 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.897041082 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.897085905 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.898116112 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.898144007 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.898195028 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.898305893 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.898318052 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.898529053 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.898569107 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.899085045 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.899096966 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.899243116 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.899358034 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.899365902 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.904088974 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.904230118 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.904309034 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.905163050 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.905181885 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.914406061 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.914458036 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:22.914530039 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.914663076 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:22.914694071 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.534647942 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.543162107 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.551603079 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.552582026 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.563352108 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.576503992 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.592127085 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.592133045 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.607754946 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.607768059 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.609246969 CEST	443	49721	142.250.181.228	192.168.2.6
Oct 8, 2024 21:21:23.609303951 CEST	443	49721	142.250.181.228	192.168.2.6
Oct 8, 2024 21:21:23.609352112 CEST	49721	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:21:23.748497963 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.748509884 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.755517960 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.755523920 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.761315107 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.761348963 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.767924070 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.767932892 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.768371105 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.768385887 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.770212889 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.770219088 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.774569988 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.774581909 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.776525974 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.776529074 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.776911020 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.776943922 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.778096914 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.778103113 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.880474091 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.880798101 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.880850077 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.882354975 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.882476091 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.882654905 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.882711887 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.883065939 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.883078098 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.883140087 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.883428097 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.883477926 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.884965897 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.885042906 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.885088921 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.949062109 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.949084997 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.949100018 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.949107885 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.950891972 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.950901031 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.950911045 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.950916052 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.952187061 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.952197075 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.955228090 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.955228090 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.955281019 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.955307007 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.957227945 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.957231998 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.957268953 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.957273006 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.964261055 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.964293003 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.964354038 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.980665922 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.980675936 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.993371010 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:23.993402004 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:23.993603945 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.003776073 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.003791094 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.033781052 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.033812046 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.033961058 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.036667109 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.036684036 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.036962986 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.036988020 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.037017107 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.047272921 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.047359943 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.047450066 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.051470041 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.051505089 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.051579952 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.051590919 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.460320950 CEST	49721	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:21:24.460352898 CEST	443	49721	142.250.181.228	192.168.2.6
Oct 8, 2024 21:21:24.634434938 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.659713984 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.684802055 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.684812069 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.685734034 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.685738087 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.687350035 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.687371016 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.688281059 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.688287020 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.702708006 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.703403950 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.703411102 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.704371929 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.704375982 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.711003065 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.720629930 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.720654964 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.721348047 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.721357107 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.726808071 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.738172054 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.738182068 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.739257097 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.739260912 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.782325983 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.782373905 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.782444954 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.787106991 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.787173033 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.787254095 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.804392099 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.804594994 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.804649115 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.817605972 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.817662954 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.817811012 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:24.839973927 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.840123892 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:24.840205908 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.244208097 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.244273901 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.244318962 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.244338036 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.329847097 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.329881907 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.329900026 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.329907894 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.330100060 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.330108881 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.330121994 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.330126047 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.332488060 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.332488060 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.332511902 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.332520962 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.336848021 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.336848021 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.336853027 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.336855888 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.680805922 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.680845022 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.680938959 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.681519985 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.681576014 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.681637049 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.681916952 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.681927919 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.683432102 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.683451891 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.683502913 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.683643103 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.683656931 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.687563896 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.687581062 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.687691927 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.687846899 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.687860012 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.688177109 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.688183069 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.688743114 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.688770056 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:25.688919067 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.690279961 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:25.690289021 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.331676006 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.334372997 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.336879969 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.342566967 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.350895882 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.397481918 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.397491932 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.398019075 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.398022890 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.402426958 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.402471066 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.403114080 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.403120041 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.406023979 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.406047106 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.406908035 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.406913996 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.407058001 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.407064915 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.407629967 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.407635927 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.407967091 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.407978058 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.408318996 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.408323050 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.497771025 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.497855902 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.497905016 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.500674009 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.500812054 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.500998974 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.503433943 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.503513098 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.503562927 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.504297972 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.504313946 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.504344940 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.504349947 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.505729914 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.505799055 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.506005049 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.508578062 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.508647919 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.508764982 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.516860962 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.516866922 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.518431902 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.518450022 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.518462896 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.518470049 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.531389952 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.531407118 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.531425953 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.531430960 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.537879944 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.537889004 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.537935019 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.537939072 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.546242952 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.546288013 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.546356916 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.561332941 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.561347008 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.598345995 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.598371029 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.598520994 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.604846954 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.604886055 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.604938030 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.630652905 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.630745888 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.630837917 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.638756990 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.638767958 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.646548986 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.646589994 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.646677017 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.646696091 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.646729946 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.647074938 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.647110939 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:26.682616949 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:26.682641983 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.022161007 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:27.022269964 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:27.022689104 CEST	49820	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:27.022738934 CEST	443	49820	173.222.162.64	192.168.2.6
Oct 8, 2024 21:21:27.022931099 CEST	49820	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:27.023396015 CEST	49820	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:27.023408890 CEST	443	49820	173.222.162.64	192.168.2.6
Oct 8, 2024 21:21:27.027156115 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 8, 2024 21:21:27.027235031 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 8, 2024 21:21:27.295631886 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.296680927 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.296708107 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.297305107 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.297310114 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.303917885 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.304321051 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.304335117 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.304735899 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.304742098 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.306397915 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.306802034 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.306818962 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.307138920 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.307147026 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.307579041 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.307845116 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.307872057 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.308163881 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.308171034 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.395807028 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.395872116 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.396099091 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.396188974 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.396202087 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.396214962 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.396219969 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.399415970 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.399450064 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.399523020 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.399707079 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.399717093 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.405431032 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.405572891 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.405623913 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.405651093 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.405663013 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.405673981 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.405678988 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.407499075 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.407876015 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.407913923 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.408164978 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.408216953 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.408237934 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.408247948 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.408305883 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.408418894 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.408418894 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.408418894 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.408418894 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.408442020 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.408447027 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.408461094 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.410479069 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.410547018 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.410562038 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.410588026 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.410638094 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.410645008 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.410816908 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.410816908 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.410823107 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.410834074 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.410836935 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.410849094 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.413367987 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.413381100 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.413569927 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.413633108 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.413641930 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.508711100 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.508773088 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.508872032 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.513962030 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.513982058 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.514005899 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.514020920 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.559403896 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.559456110 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.559573889 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.560075045 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.560107946 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:27.659281969 CEST	443	49820	173.222.162.64	192.168.2.6
Oct 8, 2024 21:21:27.659427881 CEST	49820	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:27.873600006 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:27.873670101 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.104060888 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.104402065 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.104757071 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.104777098 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.105000019 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.106540918 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.107265949 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.107271910 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.107743025 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.107768059 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.108201027 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.108207941 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.108634949 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.108642101 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.109110117 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.109118938 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.109580994 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.109587908 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.110174894 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.110181093 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.207487106 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.207644939 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.207720995 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.208446026 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.208585024 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.208753109 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.209332943 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.209522009 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.209666967 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.214020014 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.214123011 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.214179039 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.228287935 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.228339911 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.228373051 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.228391886 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.232371092 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.232371092 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.232393026 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.232415915 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.232460976 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.232491970 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.232610941 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.233810902 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.233823061 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.233962059 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.233971119 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.234061003 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.234065056 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.236186028 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.236186028 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.236191988 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.236200094 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.241636038 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.241666079 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.241717100 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.241856098 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.241869926 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.243561983 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.243616104 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.243675947 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.244507074 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.244527102 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.245615005 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.245625973 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.245675087 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.245898962 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.245908976 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.461215973 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.461880922 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.461941004 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.463721991 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.463737965 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.565577030 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.566025019 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.566095114 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.566186905 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.566186905 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.566236973 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.566262960 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.569787025 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.569818020 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.569885969 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.570024967 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.570041895 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.904217005 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.904910088 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.904930115 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.905796051 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.906021118 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.906025887 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.906192064 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.906208992 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.906631947 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.906636953 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.912166119 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.912540913 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.912575006 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.913079023 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.913094044 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.923257113 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.923979044 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.924010038 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:28.924985886 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:28.924998045 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.005521059 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.005666018 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.005723953 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.005850077 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.005863905 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.005965948 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.005971909 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.006710052 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.006767035 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.006808043 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.007047892 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.007064104 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.007074118 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.007080078 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.009417057 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.009449005 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.009457111 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.009483099 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.009563923 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.009565115 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.009684086 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.009689093 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.009804010 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.009823084 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.012002945 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.012145996 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.012202978 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.012275934 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.012299061 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.012315989 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.012325048 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.016233921 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.016249895 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.016309977 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.016657114 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.016670942 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.027400970 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.027460098 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.027513027 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.027640104 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.027640104 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.027676105 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.027704954 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.030512094 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.030520916 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.030615091 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.030718088 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.030726910 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.273607016 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.274144888 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.274166107 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.274586916 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.274590969 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.415329933 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.415509939 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.415577888 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.415735960 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.415751934 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.418390036 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.418430090 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.418560028 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.418796062 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.418812990 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.687690020 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.695354939 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.698868990 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.698890924 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.699253082 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.699265003 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.699645996 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.699667931 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.700030088 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.700036049 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.708321095 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.723507881 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.723522902 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.724355936 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.724359989 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.729203939 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.730109930 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.730123043 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.743407965 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.743416071 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.795727015 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.795785904 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.795916080 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.796053886 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.796053886 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.796072960 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.796084881 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.799055099 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.799103975 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.799308062 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.799309969 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.799321890 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.799390078 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.799498081 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.799513102 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.799521923 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.799526930 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.799541950 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.799556017 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.801920891 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.801955938 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.802027941 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.802165985 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.802175045 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.825489998 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.825551033 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.825596094 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.825809002 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.825809002 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.825819016 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.825828075 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.829077959 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.829112053 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.829235077 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.829368114 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.829380035 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.839925051 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.839988947 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.840121984 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.840121984 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.840147018 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.840159893 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.841881990 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.841909885 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:29.841974974 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.842108011 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:29.842118979 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.060964108 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.063775063 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.063796997 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.064785004 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.064791918 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.160608053 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.160744905 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.160798073 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.160986900 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.160995007 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.161015034 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.161021948 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.164103031 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.164135933 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.164196968 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.164381981 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.164402008 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.439341068 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.439905882 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.439934015 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.440020084 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.440375090 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.440382004 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.440545082 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.440577030 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.440850019 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.440855026 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.489451885 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.489936113 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.489975929 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.490398884 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.490405083 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.503411055 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.503801107 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.503822088 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.504477978 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.504483938 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.562906027 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.562973022 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.563023090 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.563191891 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.563206911 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.563216925 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.563220978 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.563882113 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.563945055 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.563992023 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.564189911 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.564202070 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.564213991 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.564220905 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.566854954 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.566879034 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.566901922 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.566910982 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.566975117 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.566979885 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.567095041 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.567104101 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.567131042 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.567152023 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.596712112 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.596910954 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.597021103 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.598159075 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.598181009 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.598192930 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.598201036 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.611952066 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.612032890 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.612088919 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.618877888 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:30.618913889 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:30.618990898 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:30.619966984 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:30.619997978 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:30.622036934 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:30.622081041 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:30.622139931 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:30.622497082 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:30.622514009 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:30.623017073 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:30.623038054 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:30.623094082 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:30.623147011 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.623179913 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.623199940 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.623209000 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.623336077 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:30.623343945 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:30.629261017 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.629271984 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.629333019 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.629556894 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.629568100 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.629734993 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.629755974 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.629810095 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.629931927 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.629941940 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.834774971 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.835519075 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.835555077 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.836379051 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.836386919 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.937205076 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.937360048 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.937513113 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.941364050 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.941389084 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.947029114 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.947110891 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:30.947175026 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.947468996 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:30.947496891 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.220110893 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.220369101 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.221214056 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.221214056 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.221287966 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.221302986 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.221632004 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.221663952 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.222038031 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.222065926 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.300529957 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.300919056 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.300965071 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.301310062 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.301821947 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.301901102 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.301978111 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.309871912 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.310535908 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.310596943 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.311932087 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.311980009 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.311995983 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.313333988 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.313857079 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.313886881 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.314706087 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.314718962 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.314728975 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.314733982 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.314996958 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.315556049 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.315556049 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.315567970 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.315613985 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.319293022 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.319669962 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.319675922 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.323194981 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.323527098 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.323745966 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.323745966 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.323754072 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.323826075 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.324191093 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.324255943 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.324516058 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.324516058 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.324800968 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.324825048 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.325232983 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.325323105 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.325798988 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.325855017 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.325855017 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.325890064 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.325912952 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.329006910 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.329040051 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.329066992 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.329092979 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.329188108 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.329298019 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.329330921 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.329333067 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.329339027 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.329345942 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.343322039 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.343363047 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.360439062 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.374917984 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.374927998 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.414374113 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.414446115 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.414719105 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.414719105 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.414784908 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.414818048 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.415538073 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.415621042 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.415796995 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.415888071 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.415888071 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.415898085 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.415906906 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.417992115 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.418045044 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.418100119 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.418114901 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.418128967 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.418350935 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.418350935 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.418359995 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.418370008 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.418384075 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.421638012 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.421782017 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.421834946 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.422502995 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.422523975 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.422684908 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.422851086 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.422864914 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.422878981 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.422878981 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.425837040 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.427408934 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.427417040 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.427541018 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.427750111 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.427759886 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.428078890 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.428137064 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.428277016 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.428519011 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.430877924 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.430881977 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.431468964 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.431492090 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.431662083 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.431862116 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.431885958 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.606303930 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.606314898 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.606386900 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.606477022 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.606477022 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.610224009 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.610246897 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.613142967 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.613188028 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.613526106 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.613593102 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.613600016 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.629811049 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.631705046 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.631733894 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.631762028 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.631767035 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.734363079 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.734455109 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.734689951 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.735037088 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.735037088 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.735054970 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.735064030 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.738303900 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.738343000 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.738622904 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.738624096 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.738655090 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.899128914 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.899147034 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.899302959 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.899842978 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.899847984 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.899861097 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.899893999 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.899976969 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.900240898 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:31.900258064 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:31.993757963 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.995215893 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.995237112 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:31.997060061 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:31.997067928 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.009490967 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.011825085 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.011825085 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.011842012 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.011848927 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.113677979 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.114665985 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.133997917 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.134274960 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.149933100 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.149997950 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.150053024 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.166121960 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.166651011 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.177175045 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.177196026 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.177242994 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.177267075 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.177309036 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.186340094 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.186340094 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.233797073 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.233824015 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.234041929 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.234067917 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.235210896 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.235424042 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.239965916 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.240204096 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.240446091 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.240655899 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.240850925 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.240906954 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.247028112 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.247035027 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.247747898 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.247752905 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.248090982 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.248110056 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.251163006 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.251178980 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.252032042 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.252043009 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.252146959 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.252170086 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.252182007 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.252188921 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.283411026 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.287411928 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.295522928 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.295649052 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.295728922 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.296058893 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.296098948 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.296099901 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.296133041 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.296260118 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.296293020 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.296298027 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.324990988 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.325325012 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.325356007 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.326421976 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.326481104 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.326917887 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.326972008 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.327176094 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.327182055 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.337798119 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.337852001 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.337903976 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.337922096 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.337960005 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.337965012 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.338042974 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.338090897 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.338999033 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.339015007 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.341068983 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.341116905 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.341172934 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.341223955 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.341272116 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.341315985 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.341797113 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.341830015 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.345588923 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.345613003 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.345669985 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.345676899 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.345702887 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.345736980 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.346206903 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.346210957 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.346223116 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.346226931 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.353954077 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.354032993 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.354085922 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.354181051 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.354218006 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.354305983 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.354362011 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.354388952 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.354413033 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.354427099 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.355405092 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.355417967 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.356965065 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.357011080 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.357084990 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.357247114 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.357270002 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.375240088 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.384743929 CEST	49868	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:32.384776115 CEST	443	49868	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:32.384931087 CEST	49868	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:32.385478973 CEST	49868	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:32.385493994 CEST	443	49868	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:32.456986904 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.457005978 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.457047939 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.457062006 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.457619905 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.457670927 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.458923101 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.458935976 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.458946943 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.458980083 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.474217892 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.475802898 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.475824118 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.485927105 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.485930920 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.614053965 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.614306927 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.614320040 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.615499020 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.615952015 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.616130114 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.616235971 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.632159948 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.632935047 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.632946014 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.633569956 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.634021997 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.634104013 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.634197950 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.649703979 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.649734020 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.649789095 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.649797916 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.649837971 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.649974108 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.650036097 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.650074005 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.650374889 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.650384903 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.650393963 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.650398016 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.653414011 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.653445005 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.653501987 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.653759003 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:32.653772116 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:32.663405895 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.675405979 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.796914101 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.797077894 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.797136068 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.809381008 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.809412003 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.840456009 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.840502024 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:32.840572119 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.841176033 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:32.841196060 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:33.005533934 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.006035089 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.006073952 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.006624937 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.006633997 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.015970945 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.016424894 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.016439915 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.016840935 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.016845942 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.018336058 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.018647909 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.018667936 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.019026995 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.019032001 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.030515909 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:33.030694008 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:33.030740976 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:33.031563044 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:33.031582117 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:33.036331892 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:33.036361933 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:33.036413908 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:33.036689043 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:33.036703110 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:33.105020046 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.105583906 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.105638027 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.105703115 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.105721951 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.105735064 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.105741978 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.109042883 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.109081984 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.109241962 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.109472990 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.109488010 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.116787910 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.116941929 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.116997957 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.117085934 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.117085934 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.117094994 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.117105007 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.119762897 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.119785070 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.119788885 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.119807959 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.119874001 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.119889975 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.119889975 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.119956970 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.120002985 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.120115042 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.120115042 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.120122910 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.120127916 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.120155096 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.120161057 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.122191906 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.122215033 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.122268915 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.122404099 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.122414112 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.125745058 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.126086950 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.126096964 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.126580000 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.126584053 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.233659983 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.233717918 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.233771086 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.234040022 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.234075069 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.234101057 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.234117985 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.236938953 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.236979008 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.237056971 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.237236023 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:33.237252951 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:33.279109001 CEST	443	49868	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:33.279218912 CEST	49868	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:33.284260988 CEST	49868	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:33.284331083 CEST	443	49868	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:33.284660101 CEST	443	49868	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:33.286429882 CEST	49868	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:33.286510944 CEST	49868	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:33.286523104 CEST	443	49868	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:33.286623955 CEST	49868	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:33.327409983 CEST	443	49868	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:34.407449007 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.408058882 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.408082008 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.408721924 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.408730984 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.444319963 CEST	443	49868	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:34.444438934 CEST	443	49868	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:34.444505930 CEST	49868	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:34.444711924 CEST	49868	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:34.444735050 CEST	443	49868	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:34.601161957 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.601423025 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:34.601440907 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.601789951 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.602746010 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:34.602824926 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.602931976 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:34.647409916 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.682307959 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.682466984 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.682691097 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.689421892 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.689421892 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.689438105 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.689445019 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.706232071 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.706290960 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.706440926 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:34.735064983 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.736767054 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.737421989 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.742779970 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.754385948 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.756422043 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:34.756433964 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.756762028 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.759766102 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.759792089 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.760224104 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.760231018 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.763823986 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.763838053 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.767323017 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.767334938 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.767493963 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.767508984 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.771228075 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.771233082 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.773315907 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.773325920 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.774470091 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.774475098 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.776669979 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:34.776737928 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.776870966 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:34.791171074 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:34.791189909 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.792481899 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.792572021 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.792649031 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.792889118 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.792918921 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.819391966 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.827220917 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:34.867419004 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.868196011 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.868292093 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.869522095 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.869539976 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.869576931 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.869581938 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.871714115 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.871869087 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.871944904 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.872109890 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.872128010 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.872137070 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.872143030 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.872397900 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.872432947 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.872489929 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.872627974 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.872646093 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.874548912 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.874582052 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.874584913 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.874638081 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:34.874803066 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.875745058 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:34.875745058 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:34.875874043 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.875890017 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.878638029 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.879076958 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.879129887 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.879163027 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.879168987 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.879180908 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.879184008 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.882497072 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.882586002 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.882678986 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.882839918 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.882880926 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.976327896 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.976772070 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.976826906 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.976855993 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.976866961 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.976897955 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.976903915 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.980515003 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.980551004 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:34.980616093 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.980815887 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:34.980854034 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.186642885 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 8, 2024 21:21:35.186669111 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 8, 2024 21:21:35.567172050 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.567728043 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.567781925 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.568345070 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.568358898 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.868820906 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.868901014 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.868958950 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.869281054 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.869323969 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.869354010 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.869370937 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.872698069 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.872730970 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.872801065 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.872952938 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.872967005 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.874769926 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.874815941 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.875133038 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.875304937 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.875322104 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.875894070 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.875969887 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.875977039 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.876440048 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.876524925 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.877055883 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.877072096 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.877685070 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.877722025 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.878341913 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.878348112 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.878819942 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.878832102 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.879677057 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.879688978 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.998430967 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.998471022 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.998522997 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.998759031 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.998778105 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.998788118 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.998794079 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.999274015 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.999301910 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.999349117 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.999353886 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.999416113 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.999535084 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.999569893 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:35.999607086 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:35.999622107 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.000221014 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.000287056 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.000332117 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.000345945 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.000405073 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.000452042 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.001225948 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.001240969 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.001250982 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.001257896 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.002816916 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.002851009 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.002919912 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.003469944 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.003484011 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.003925085 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.003964901 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.004023075 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.004184961 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.004206896 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.005249023 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.005266905 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.005325079 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.005423069 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.005650043 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.005664110 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.005770922 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.005806923 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.006213903 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.006231070 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.006254911 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.006267071 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.008546114 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.008574963 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.008627892 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.008917093 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.008933067 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.564666986 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.565316916 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.565335989 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.566570997 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.566576004 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.657813072 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.660324097 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.660356998 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.661181927 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.661190987 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.666269064 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.666841984 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.666858912 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.667399883 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.667404890 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.671766043 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.671988964 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.672110081 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.672688961 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.672688961 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.672705889 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.672713995 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.676981926 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.677037954 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.677130938 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.677798986 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.677829027 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.678628922 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.679179907 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.679192066 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.682704926 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.682712078 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.708807945 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.711159945 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.711184978 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.714694023 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.714705944 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.788996935 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.789020061 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.789057016 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.789117098 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.789285898 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.790050030 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.790110111 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.790417910 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.790417910 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.790437937 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.790448904 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.790468931 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.791589022 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.791589022 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.791601896 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.791610956 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.797532082 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.797566891 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.797712088 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.801033020 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.801052094 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.801320076 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.801897049 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.801899910 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.801909924 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.801920891 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.816380024 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.816576004 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.819052935 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.833081007 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.833105087 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.909651041 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.909689903 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.909893990 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.910480022 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.910495043 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.942003965 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.942383051 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.942639112 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.942856073 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.942856073 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.942873955 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.942884922 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.949259996 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.949356079 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:36.949559927 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.949559927 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:36.949641943 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.395289898 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.412451982 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.412494898 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.413305044 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.413312912 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.438153028 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.452126026 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.459882021 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.459903002 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.460622072 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.460628986 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.461611032 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.461625099 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.462578058 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.462584019 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.514550924 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.514820099 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.514884949 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.544583082 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.544598103 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.544625998 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.544632912 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.556334019 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.556358099 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.556391954 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.556402922 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.556436062 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.559107065 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.559998989 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.560082912 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.588525057 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.595088005 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.640012026 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.640018940 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.644054890 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.644073009 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.645294905 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.645298958 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.646094084 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.646126986 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.646140099 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.646147966 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.648740053 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.648772955 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.648783922 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.648791075 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.659617901 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.659631014 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.660571098 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.660577059 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.690659046 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.690690041 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.690948963 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.730009079 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.730051041 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.730211020 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.732201099 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.732227087 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.732290983 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.735300064 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.735330105 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.736154079 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.736171007 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.738913059 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.738928080 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.747457027 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.747514009 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.747558117 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.748694897 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.748694897 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.748707056 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.748714924 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.757205963 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.757287025 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.757363081 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.757591009 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.757623911 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.777394056 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.777416945 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.777462959 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.777465105 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.777498960 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.777862072 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.777875900 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.777889967 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.777894974 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.782543898 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.782560110 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:37.782613039 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.783130884 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:37.783144951 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.328385115 CEST	49899	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:38.328413010 CEST	443	49899	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:38.328851938 CEST	49899	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:38.331434965 CEST	49899	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:38.331448078 CEST	443	49899	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:38.335131884 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:38.375406027 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:38.539824009 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.540652990 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.540683031 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.541464090 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.541981936 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.541989088 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.542114019 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.542136908 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.542906046 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.542911053 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.545795918 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.546278954 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.546293974 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.548362017 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.549556017 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.549566031 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.549568892 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.550364017 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.550374031 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:38.550389051 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.550400019 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:38.550415993 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:38.550430059 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:38.550446033 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:38.550472975 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:38.550489902 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:38.550538063 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:38.550544977 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:38.550554037 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:38.550595999 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:38.551054001 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.551060915 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.551826000 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.551834106 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.552576065 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.552582026 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.555972099 CEST	49716	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:38.555989981 CEST	443	49716	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:38.642360926 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.642421007 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.642708063 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.642785072 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.642966032 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.643034935 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.643282890 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.643299103 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.644722939 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.644764900 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.647674084 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.647701979 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.647747040 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.647831917 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.647890091 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.647998095 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.648840904 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.648849964 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.648955107 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.648963928 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.648967981 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.649002075 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.649008989 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.650868893 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.650897026 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.651036978 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.651057005 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.651057959 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.651352882 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.651364088 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.651452065 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.651464939 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.652268887 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.652367115 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.652470112 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.652615070 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.652615070 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.652657986 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.652686119 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.654720068 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.654767990 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.654808998 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.654858112 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.655010939 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.655025959 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.655042887 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.655075073 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.655112028 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.655155897 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.655462980 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.655479908 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.655503035 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.655515909 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.660912037 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.660937071 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:38.661050081 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.661200047 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:38.661214113 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.210510969 CEST	443	49899	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:39.211075068 CEST	49899	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:39.211086035 CEST	443	49899	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:39.211455107 CEST	443	49899	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:39.211863995 CEST	49899	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:39.211919069 CEST	443	49899	52.97.135.98	192.168.2.6
Oct 8, 2024 21:21:39.255398989 CEST	49899	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:21:39.307722092 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.314011097 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.315625906 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.316366911 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.358705044 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.358727932 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.358741045 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.358972073 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.397682905 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.445434093 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.931355000 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.931377888 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.931932926 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.931937933 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.932899952 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.932934046 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.933404922 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.933413029 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.934237957 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.934254885 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.934608936 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.934617043 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.935059071 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.935075045 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.935411930 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.935416937 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.935635090 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.935712099 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.935957909 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:39.935971022 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:39.990710020 CEST	49906	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:39.990751982 CEST	443	49906	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:39.990840912 CEST	49906	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:39.991288900 CEST	49906	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:39.991306067 CEST	443	49906	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:40.030271053 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.030704021 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.030960083 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.032007933 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.032079935 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.032146931 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.032181978 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.032300949 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.033137083 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.033204079 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.034152031 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.034157991 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.034215927 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.034228086 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.034265041 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.034828901 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.034990072 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.035048962 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.824129105 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.824187994 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.829061985 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.829062939 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.829082012 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.829091072 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.832395077 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.832396030 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.832473993 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.832499981 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.835021019 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.835042953 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.837577105 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.837577105 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:40.837594986 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.837605000 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:40.967120886 CEST	443	49906	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:41.012259960 CEST	49906	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:41.092458010 CEST	49906	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:41.092473030 CEST	443	49906	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:41.093264103 CEST	443	49906	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:41.099808931 CEST	49906	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:41.099808931 CEST	49906	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:41.099828005 CEST	443	49906	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:41.099921942 CEST	443	49906	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:41.146734953 CEST	49906	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:41.151448965 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.151531935 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:41.152925968 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.152929068 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.152975082 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:41.153992891 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.153995991 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.154036045 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:41.155173063 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.155173063 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.155184984 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:41.155519962 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.155560017 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.155596018 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:41.155975103 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.155975103 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.155994892 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:41.155996084 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:41.156929016 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.156940937 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:41.157754898 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.157768965 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:41.157797098 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.158071041 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:41.158086061 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:41.294711113 CEST	443	49906	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:41.294739008 CEST	443	49906	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:41.294842005 CEST	443	49906	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:41.294852972 CEST	49906	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:41.294969082 CEST	49906	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:41.295675993 CEST	49906	443	192.168.2.6	52.98.243.34
Oct 8, 2024 21:21:41.295697927 CEST	443	49906	52.98.243.34	192.168.2.6
Oct 8, 2024 21:21:42.130740881 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.132517099 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.133891106 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.138322115 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.148056030 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.239406109 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.239573002 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.319405079 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.322745085 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.322746038 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.738512039 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.738533974 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.739670038 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.739676952 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.740004063 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.740075111 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.740130901 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.740164042 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.740535975 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.740550995 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.740782976 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.740788937 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.740911007 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.740923882 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.740993977 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.741008043 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.741467953 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.741473913 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.741570950 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.741576910 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.836735964 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.837039948 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.837090015 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.837527990 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.837543964 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.837554932 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.837560892 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.839329004 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.840039015 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.840049982 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.840080976 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.840095997 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.840107918 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.840142965 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.840404034 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.840419054 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.840428114 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.840434074 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.840459108 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.840718985 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.840760946 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.840759993 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.840818882 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.841022968 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.841022968 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.841059923 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.841084003 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.841454029 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.841609001 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.841646910 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.841840982 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.841845036 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.843085051 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.843091011 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.843360901 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.843395948 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.843453884 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.844635010 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.844645023 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.844703913 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.844894886 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.844906092 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.845151901 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.845163107 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.846616983 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.846656084 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.846712112 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.846803904 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.846889973 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.846955061 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.847141981 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.847165108 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.847176075 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.847182989 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.847891092 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.847922087 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:42.847966909 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.848223925 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:42.848238945 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.531577110 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.532190084 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.532207012 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.532799006 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.532803059 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.544574022 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.544946909 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.544970989 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.545341969 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.545346022 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.545463085 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.545743942 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.545792103 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.545994997 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.546148062 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.546161890 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.546267986 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.546294928 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.546619892 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.546624899 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.612521887 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.613044977 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.613059998 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.613464117 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.613471985 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.637010098 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.637171030 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.637231112 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.637392998 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.637392998 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.637408972 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.637418032 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.640552044 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.640589952 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.640665054 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.640839100 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.640851021 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.644648075 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.644720078 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.644784927 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.644902945 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.644902945 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.644939899 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.644961119 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.647689104 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.647738934 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.647802114 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.647924900 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.647942066 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.650082111 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.650111914 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.650161982 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.650162935 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.650288105 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.650398016 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.650407076 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.650415897 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.650419950 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.650846958 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.651295900 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.651335955 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.651345968 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.651381016 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.651439905 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.651456118 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.651464939 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.651468992 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.653062105 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.653081894 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.653146982 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.653315067 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.653327942 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.653456926 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.653476000 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.653518915 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.653660059 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.653671026 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.736048937 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.736104012 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.736151934 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.736191988 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.736191988 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.736352921 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.736377001 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.736569881 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.736576080 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.739211082 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.739232063 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:43.739280939 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.739479065 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:43.739485979 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.490895033 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.491430998 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.491460085 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.491626978 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.491945982 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.491951942 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.492094994 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.492113113 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.492430925 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.492436886 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.493911982 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.494227886 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.494256973 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.494645119 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.494648933 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.500266075 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.500577927 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.500653982 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.500955105 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.500968933 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.587012053 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.587749004 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.587759972 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.588227034 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.588229895 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.590362072 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.590584993 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.590785027 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.590919018 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.590934992 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.590945005 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.590951920 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.592319012 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.592592001 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.592655897 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.592756987 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.592772961 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.592782021 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.592787027 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.593990088 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.594691038 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.594741106 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.594762087 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.594794989 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.596725941 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.596740961 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.604068995 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.604094982 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.604146004 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.604191065 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.604234934 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.620393038 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.620435953 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.627564907 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.627585888 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.627744913 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.629931927 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.630007029 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.630104065 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.630245924 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.630260944 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.630444050 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.630477905 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.631232023 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.631254911 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.631586075 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.632172108 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.632179022 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.632285118 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.632595062 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.632605076 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.632698059 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.632724047 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.692306042 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.692817926 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.692889929 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.692984104 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.693002939 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.693011999 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.693016052 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.697758913 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.697803020 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:44.697875977 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.698038101 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:44.698060989 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.284483910 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.285382986 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.285402060 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.286077976 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.286083937 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.293988943 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.294714928 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.294735909 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.295336962 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.295341015 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.308248997 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.308600903 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.308615923 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.309056044 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.309062004 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.313715935 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.314107895 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.314126968 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.314497948 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.314503908 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.369981050 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.371608019 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.371634960 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.372200012 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.372212887 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.384438038 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.384619951 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.384668112 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.384681940 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.384721041 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.385010004 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.385027885 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.385040045 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.385047913 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.388493061 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.388535976 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.388617992 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.388813972 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.388828039 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.411801100 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.411880016 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.412133932 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.412189007 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.412206888 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.412218094 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.412224054 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.415337086 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.415405035 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.415477037 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.415627956 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.415654898 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.417397976 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.417457104 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.417629004 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.417663097 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.417680979 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.417697906 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.417707920 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.419651031 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.419696093 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.419755936 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.419913054 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.419929981 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.449232101 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.449436903 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.449491024 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.449510098 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.449513912 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.449532032 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.449536085 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.451581955 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.451612949 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.451855898 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.452075958 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.452088118 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.469157934 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.469188929 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.469235897 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.469270945 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.469270945 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.469407082 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.469407082 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.469423056 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.469433069 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.471477032 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.471506119 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:45.471657038 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.471811056 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:45.471820116 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.053070068 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.053762913 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.053775072 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.054069996 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.054455042 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.054459095 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.054486036 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.054546118 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.054804087 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.054817915 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.124389887 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.124780893 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.124794960 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.125200033 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.125205040 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.152394056 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.153043032 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.153094053 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.153145075 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.153145075 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.153158903 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.153167963 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.154007912 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.154087067 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.154148102 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.154262066 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.154262066 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.154294968 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.154316902 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.156722069 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.156742096 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.156749964 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.156775951 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.156832933 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.156852961 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.156946898 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.156955004 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.157052040 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.157063007 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.168858051 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.169190884 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.169212103 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.169580936 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.169584990 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.275105000 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.275795937 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.275861979 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.275912046 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.275938034 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.275966883 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.275980949 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.278784990 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.278819084 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.278887033 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.279036045 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.279046059 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.442923069 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.443030119 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.443073988 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.443093061 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.443109989 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.443159103 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.443365097 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.443377018 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.443392038 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.443397999 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.446485996 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.446496010 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.446568966 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.446717024 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.446724892 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.817532063 CEST	443	49820	173.222.162.64	192.168.2.6
Oct 8, 2024 21:21:46.817584038 CEST	49820	443	192.168.2.6	173.222.162.64
Oct 8, 2024 21:21:46.837035894 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.837781906 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.837855101 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.838943958 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.838958979 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.851083994 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.852117062 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.852134943 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.853272915 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.853281975 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.896198034 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.897120953 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.897157907 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.898345947 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.898356915 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.942015886 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.942150116 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.942200899 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.942663908 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.942689896 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.942708015 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.942718983 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.948096037 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.948120117 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.948334932 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.948864937 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.948879004 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.959019899 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.959045887 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.959084988 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.959094048 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.959125042 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.959424019 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.959445000 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.959456921 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.959465027 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.964030981 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.964078903 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.964193106 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.965090036 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.965112925 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.969662905 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.970457077 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.970479012 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:46.971667051 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:46.971672058 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.016073942 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.016478062 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.016532898 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.017091990 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.017126083 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.017152071 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.017167091 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.021177053 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.021204948 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.021286011 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.021805048 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.021817923 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.072515011 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.072616100 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.072778940 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.115160942 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.115175009 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.115185976 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.115190983 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.148443937 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.202266932 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.538937092 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.538949966 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.539474964 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.539479017 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.550317049 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.550348997 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.550471067 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.550622940 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.550632000 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.619792938 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.620668888 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.620731115 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.621536016 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.621542931 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.626786947 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.627456903 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.627511978 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.628328085 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.628341913 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.637697935 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.637867928 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.638112068 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.638514042 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.638525963 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.642544985 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.642579079 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:47.642653942 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.642779112 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:47.642784119 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.055164099 CEST	49945	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:48.055196047 CEST	443	49945	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:48.055310011 CEST	49945	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:48.055943012 CEST	49945	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:48.055953979 CEST	443	49945	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:48.088782072 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.088850021 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.088897943 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.089113951 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.089133978 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.089143991 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.089150906 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.089235067 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.089391947 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.089442015 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.089498997 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.089524031 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.089536905 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.089545012 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.090327024 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.090830088 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.090837955 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.091387987 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.091392040 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.093204021 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.093240976 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.093303919 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.093415976 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.093427896 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.093430996 CEST	49947	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.093467951 CEST	443	49947	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.093512058 CEST	49947	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.093791008 CEST	49947	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.093805075 CEST	443	49947	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.263649940 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.264425039 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.264476061 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.269053936 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.269081116 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.269089937 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.269097090 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.275089025 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.319475889 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.319524050 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.319591045 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.319926977 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.319936991 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.320844889 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.320852995 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.322094917 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.322113037 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.470954895 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.471194983 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.471245050 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.473973036 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.473987103 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.474028111 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.474033117 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.480336905 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.480376959 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.480433941 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.481266975 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.481282949 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.874429941 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.876517057 CEST	443	49947	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.881150007 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.881172895 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.882366896 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.882370949 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.883318901 CEST	49947	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.883405924 CEST	443	49947	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.883955956 CEST	49947	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.883971930 CEST	443	49947	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.887815952 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.888683081 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.888700962 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.889516115 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.889522076 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.981348038 CEST	443	49945	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:48.981431961 CEST	49945	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:48.982034922 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.982260942 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.982320070 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.982367992 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.982403040 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.982455015 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.986264944 CEST	49945	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:48.986274958 CEST	443	49945	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:48.987044096 CEST	443	49945	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:48.993174076 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.993205070 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.993233919 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:48.993248940 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.994379997 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.994441032 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:48.994484901 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.002043009 CEST	49945	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:49.002320051 CEST	49945	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:49.002326965 CEST	443	49945	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:49.002551079 CEST	49945	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:49.003123999 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.003139019 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.003148079 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.003153086 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.010262966 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.010288954 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.010348082 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.012865067 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.012888908 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.012945890 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.013250113 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.013276100 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.013585091 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.013597012 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.031311989 CEST	443	49947	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.033968925 CEST	443	49947	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.034158945 CEST	49947	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.034158945 CEST	49947	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.034158945 CEST	49947	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.038222075 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.038233995 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.038292885 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.038470984 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.038480997 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.043448925 CEST	443	49945	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:49.058442116 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.058929920 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.058942080 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.059768915 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.059773922 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.190488100 CEST	443	49945	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:49.190685034 CEST	443	49945	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:49.191406012 CEST	49945	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:49.194840908 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.195178032 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.195204973 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.200457096 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.203048944 CEST	49945	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:21:49.203066111 CEST	443	49945	40.113.103.199	192.168.2.6
Oct 8, 2024 21:21:49.210827112 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.210841894 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.210872889 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.210877895 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.211786032 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.211812973 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.212470055 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.212475061 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.216201067 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.216238022 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.216464996 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.217108011 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.217120886 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.313930035 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.313975096 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.314089060 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.314174891 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.314357996 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.314357996 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.315422058 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.315431118 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.316489935 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.316499949 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.316709995 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.316895008 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.316900015 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.342396975 CEST	49947	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.342432022 CEST	443	49947	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.812869072 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.821141958 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.847779036 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.847800016 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.850852013 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.850857019 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.866712093 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.866741896 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.867073059 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.867079973 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.910156012 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.915810108 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.915893078 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.916687965 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.916709900 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.953325987 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.953356028 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.953408957 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.953465939 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.953515053 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.954092026 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.954092026 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.954114914 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.954137087 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.959712982 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.959759951 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.960551977 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.961818933 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.961839914 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.967694044 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.967719078 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.967765093 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.967804909 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.967943907 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.969012022 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.969012022 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.969053984 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.969077110 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.975518942 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.975550890 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:49.975687027 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.982043028 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:49.982059956 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.012434959 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.013058901 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.013078928 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.015522957 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.015538931 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.018129110 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.018975973 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.019246101 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.019328117 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.019328117 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.019346952 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.019366980 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.028845072 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.028877020 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.029850006 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.030808926 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.030824900 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.114973068 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.115006924 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.115048885 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.115062952 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.115077019 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.115119934 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.116121054 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.116138935 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.123059034 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.124250889 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.124325991 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.124393940 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.126624107 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.126635075 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.129096031 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.129101038 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.130193949 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.130230904 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.246934891 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.246987104 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.247033119 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.247754097 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.247780085 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.247801065 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.247807980 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.257611990 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.257649899 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.257718086 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.259407043 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.259418011 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.633523941 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.634710073 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.634751081 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.635776997 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.635787010 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.636725903 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.637547970 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.637571096 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.638469934 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.638477087 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.707648039 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.734600067 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.734652996 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.734705925 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.734731913 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.734791994 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.734846115 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.740803957 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.740827084 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.740869999 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.740871906 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.740922928 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.763437986 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.772105932 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.772113085 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.773366928 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.773372889 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.774048090 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.774066925 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.774080038 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.774087906 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.776424885 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.776424885 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.776451111 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.776463985 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.786886930 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.786912918 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.786973000 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.787221909 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.787246943 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.787677050 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.787770987 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.787830114 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.788687944 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.788718939 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.796003103 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.797590971 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.797624111 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.798521996 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.798532009 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.881727934 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.882610083 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.882671118 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.882690907 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.882769108 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.882819891 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.892446995 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.892463923 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.892477989 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.892484903 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.899892092 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.899987936 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.900062084 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.900310993 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.900331974 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.914733887 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.915277958 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.915338993 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.917396069 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.917429924 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.917457104 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.917473078 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.932950020 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.932980061 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:50.933054924 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.933260918 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:50.933275938 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.028745890 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.029687881 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.029687881 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.029714108 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.029725075 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.256006956 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.256144047 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.256364107 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.256453037 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.256453037 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.256474018 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.256483078 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.259497881 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.259520054 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.259666920 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.259787083 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.259799957 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.619057894 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.624245882 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.670708895 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.670742035 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.689471006 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.714515924 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.736931086 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.764511108 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.851681948 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.851689100 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.852071047 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.852077961 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.855339050 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.855412006 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.855963945 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.855978966 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.856409073 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.856409073 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.856431961 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.856441021 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.856801987 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.856836081 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.857300997 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.857312918 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.948009968 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.948196888 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.948231936 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.948415995 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.949619055 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.949630022 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.950426102 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.950434923 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.951423883 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.951596975 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.952802896 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.952927113 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.953133106 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.953505993 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.953553915 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.953576088 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.953685999 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.953742981 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.954258919 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.972222090 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.978826046 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.978876114 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.978920937 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.978931904 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.978957891 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.980005026 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.980026007 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.980026960 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.980031013 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.980046034 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.980062962 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.980096102 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.980114937 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.981923103 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.981975079 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.982002974 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.982018948 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.983419895 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.983419895 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.983432055 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.983438969 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.987462044 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.987462044 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.987549067 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.987581015 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.987658978 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.987658978 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.987889051 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.987924099 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.987957001 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.987978935 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.990173101 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.990186930 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:51.990300894 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.990403891 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:51.990425110 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.077325106 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.077538013 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.077969074 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.090210915 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.090210915 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.090218067 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.090224981 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.093076944 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.093111992 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.093367100 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.103949070 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.103966951 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.639713049 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.640101910 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.640351057 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.640372992 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.640897036 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.640902996 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.641352892 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.641366959 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.641693115 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.641697884 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.650295973 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.650979042 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.651046038 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.651571989 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.651587963 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.672851086 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.673321962 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.673337936 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.673810959 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.673820972 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.737768888 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.738543034 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.738596916 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.738607883 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.738651037 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.738694906 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.738714933 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.738734007 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.738744974 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.738751888 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.739650965 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.740102053 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.740156889 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.740192890 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.740196943 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.740207911 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.740211964 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.741857052 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.741945028 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.742042065 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.742372036 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.742405891 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.742624044 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.742661953 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.742728949 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.742808104 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.742825031 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.747761965 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.748177052 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.748191118 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.748879910 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.748887062 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.751425028 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.751866102 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.751939058 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.751940012 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.751940012 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.753931999 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.753951073 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.754005909 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.754175901 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.754184008 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.781445980 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.781605959 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.781666040 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.781701088 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.781702042 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.781743050 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.781769991 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.783574104 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.783654928 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.783730030 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.783843040 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.783876896 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.885701895 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.885915995 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.885965109 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.886017084 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.886037111 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.886054993 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.886060953 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.888063908 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.888103962 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:52.888178110 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.888333082 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:52.888361931 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.061702013 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.061744928 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.426995039 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.427591085 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.427645922 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.428108931 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.428123951 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.436656952 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.437052011 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.437068939 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.437500954 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.437505960 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.473862886 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.474195004 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.474211931 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.474595070 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.474600077 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.475444078 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.475754976 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.475819111 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.476197958 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.476212978 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.712455034 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.712537050 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.712810040 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.712867975 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.712867975 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.712903023 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.712928057 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.713332891 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.713404894 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.713464975 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.713471889 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.713515997 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.713565111 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.713792086 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.713809967 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.713819981 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.713826895 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.716871977 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.716891050 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.716986895 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.717164993 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.717192888 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.717307091 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.717432976 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.717443943 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.717806101 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.717819929 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.718672991 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.719368935 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.719419956 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.720036983 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.720045090 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.804841995 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.805279970 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.805340052 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.805397034 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.805406094 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.805416107 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.805419922 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.805527925 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.805998087 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.806067944 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.806107044 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.806154013 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.806188107 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.806224108 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.806240082 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.806250095 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.808780909 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.808810949 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.808861017 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.808870077 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.808886051 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.808971882 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.809119940 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.809142113 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.809171915 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.809180975 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.820523977 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.821048021 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.821110964 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.821152925 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.821152925 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.821172953 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.821185112 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.823004961 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.823015928 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:53.823088884 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.823246002 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:53.823256016 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.360034943 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.360589981 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.360620975 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.365147114 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.365153074 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.380434036 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.382342100 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.382342100 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.382353067 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.382365942 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.451198101 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.452399015 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.452399015 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.452456951 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.452501059 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.460449934 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.460591078 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.460767984 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.460767984 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.460791111 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.460802078 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.463891029 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.463911057 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.464155912 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.464155912 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.464186907 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.469801903 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.470114946 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.470122099 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.470478058 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.470480919 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.472657919 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.472956896 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.472969055 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.473292112 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.473297119 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.483980894 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.484185934 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.484273911 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.484289885 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.484370947 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.484370947 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.485101938 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.485109091 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.486515045 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.486604929 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.486852884 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.486854076 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.486938000 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.550184965 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.550326109 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.550477028 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.550523996 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.550698042 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.550698042 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.550771952 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.550806046 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.553308010 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.553344011 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.553580999 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.553580999 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.553632975 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.570533991 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.570578098 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.570684910 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.570759058 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.570759058 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.570923090 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.570923090 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.570928097 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.570935011 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.572818995 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.572833061 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.573051929 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.573051929 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.573070049 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.583909035 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.583986998 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.584534883 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.584534883 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.585203886 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.585216999 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.586502075 CEST	49988	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.586518049 CEST	443	49988	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:54.586683989 CEST	49988	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.586750031 CEST	49988	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:54.586757898 CEST	443	49988	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.168862104 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.169529915 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.169557095 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.170406103 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.170413971 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.175684929 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.176152945 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.176193953 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.176753044 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.176759005 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.204014063 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.204689980 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.204752922 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.205097914 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.205116987 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.263514042 CEST	443	49988	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.264015913 CEST	49988	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.264045954 CEST	443	49988	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.264635086 CEST	49988	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.264642000 CEST	443	49988	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.264722109 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.265110016 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.265121937 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.265712023 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.265718937 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.275453091 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.275506973 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.275576115 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.275583982 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.275669098 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.275727034 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.275883913 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.275898933 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.275909901 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.275908947 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.275917053 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.276050091 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.276117086 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.276160002 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.276164055 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.276165009 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.276185989 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.276226044 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.276254892 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.276290894 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.280154943 CEST	49989	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.280245066 CEST	443	49989	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.280325890 CEST	49990	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.280325890 CEST	49989	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.280354023 CEST	443	49990	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.280424118 CEST	49990	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.280493021 CEST	49989	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.280513048 CEST	443	49989	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.280608892 CEST	49990	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.280622959 CEST	443	49990	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.302660942 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.302810907 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.302889109 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.302977085 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.302977085 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.303018093 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.303046942 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.305773020 CEST	49991	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.305804014 CEST	443	49991	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.305875063 CEST	49991	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.306056976 CEST	49991	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.306070089 CEST	443	49991	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.364051104 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.364123106 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.364178896 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.364191055 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.364281893 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.364296913 CEST	443	49988	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.364335060 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.364433050 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.364440918 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.364454985 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.364463091 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.364695072 CEST	443	49988	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.364768028 CEST	49988	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.364799023 CEST	49988	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.364814043 CEST	443	49988	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.364824057 CEST	49988	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.364828110 CEST	443	49988	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.369112015 CEST	49992	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.369143963 CEST	443	49992	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.369172096 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.369200945 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.369270086 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.369304895 CEST	49992	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.369589090 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.369596958 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.369606972 CEST	49992	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.369637012 CEST	443	49992	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.964843035 CEST	443	49990	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.965890884 CEST	443	49991	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.977299929 CEST	443	49989	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.985938072 CEST	49990	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.985989094 CEST	443	49990	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.988058090 CEST	49990	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.988075018 CEST	443	49990	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.989139080 CEST	49991	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.989182949 CEST	443	49991	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.990540981 CEST	49991	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.990547895 CEST	443	49991	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.992041111 CEST	49989	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.992074013 CEST	443	49989	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:55.993467093 CEST	49989	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:55.993479013 CEST	443	49989	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.040069103 CEST	443	49992	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.041306019 CEST	49992	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.041330099 CEST	443	49992	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.042403936 CEST	49992	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.042409897 CEST	443	49992	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.056251049 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.058358908 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.058425903 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.058770895 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.058785915 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.084851980 CEST	443	49990	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.085030079 CEST	443	49990	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.085087061 CEST	49990	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.085421085 CEST	49990	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.085447073 CEST	443	49990	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.085484982 CEST	49990	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.085494041 CEST	443	49990	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.086021900 CEST	443	49991	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.086088896 CEST	443	49991	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.086142063 CEST	49991	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.086170912 CEST	443	49991	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.086429119 CEST	443	49991	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.086477995 CEST	49991	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.087399960 CEST	49991	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.087418079 CEST	443	49991	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.087434053 CEST	49991	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.087440014 CEST	443	49991	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.093185902 CEST	443	49989	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.093322992 CEST	443	49989	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.093372107 CEST	49989	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.093379974 CEST	443	49989	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.093420029 CEST	49989	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.097081900 CEST	49989	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.097104073 CEST	443	49989	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.102317095 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.102353096 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.102799892 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.103430986 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.103456974 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.103539944 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.103559017 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.103574991 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.103715897 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.103727102 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.105863094 CEST	49996	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.105889082 CEST	443	49996	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.106447935 CEST	49996	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.107165098 CEST	49996	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.107177973 CEST	443	49996	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.139866114 CEST	443	49992	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.139904022 CEST	443	49992	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.139965057 CEST	49992	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.139985085 CEST	443	49992	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.140059948 CEST	49992	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.144028902 CEST	49992	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.144067049 CEST	443	49992	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.154076099 CEST	49997	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.154169083 CEST	443	49997	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.154380083 CEST	49997	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.155155897 CEST	49997	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.155199051 CEST	443	49997	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.157041073 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.157346010 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.157423973 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.157821894 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.157869101 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.157901049 CEST	49993	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.157917023 CEST	443	49993	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.161704063 CEST	49998	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.161767960 CEST	443	49998	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.161834002 CEST	49998	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.162606001 CEST	49998	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.162650108 CEST	443	49998	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.741674900 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.742858887 CEST	443	49998	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.742944002 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.743012905 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.744010925 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.744028091 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.744520903 CEST	49998	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.744556904 CEST	443	49998	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.745502949 CEST	49998	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.745513916 CEST	443	49998	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.745724916 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.746542931 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.746570110 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.747721910 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.747726917 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.759952068 CEST	443	49996	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.761012077 CEST	49996	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.761035919 CEST	443	49996	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.761564016 CEST	49996	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.761574030 CEST	443	49996	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.838100910 CEST	443	49997	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.838778973 CEST	49997	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.838844061 CEST	443	49997	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.839323997 CEST	49997	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.839378119 CEST	443	49997	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.841837883 CEST	443	49998	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.842001915 CEST	443	49998	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.842087030 CEST	49998	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.842196941 CEST	49998	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.842235088 CEST	443	49998	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.842264891 CEST	49998	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.842278957 CEST	443	49998	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.843538046 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.844069958 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.844198942 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.844198942 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.844290018 CEST	49994	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.844331980 CEST	443	49994	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.845817089 CEST	49999	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.845854044 CEST	443	49999	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.845963955 CEST	49999	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.846151114 CEST	49999	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.846165895 CEST	443	49999	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.846232891 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.846302032 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.846364021 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.846389055 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.846431971 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.846571922 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.846594095 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.846606016 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.846611977 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.846621037 CEST	49995	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.846623898 CEST	443	49995	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.847414017 CEST	50000	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.847460032 CEST	443	50000	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.847664118 CEST	50000	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.847826004 CEST	50000	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.847848892 CEST	443	50000	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.849323034 CEST	50001	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.849360943 CEST	443	50001	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.849497080 CEST	50001	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.849627972 CEST	50001	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.849644899 CEST	443	50001	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.869878054 CEST	443	49996	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.870162964 CEST	443	49996	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.870240927 CEST	49996	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.870270014 CEST	49996	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.870295048 CEST	443	49996	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.870306015 CEST	49996	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.870311975 CEST	443	49996	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.873725891 CEST	50002	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.873756886 CEST	443	50002	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.873929977 CEST	50002	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.874439955 CEST	50002	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.874454021 CEST	443	50002	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.942621946 CEST	443	49997	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.943406105 CEST	443	49997	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.943484068 CEST	49997	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.943582058 CEST	49997	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.943583012 CEST	49997	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.943634987 CEST	443	49997	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.943677902 CEST	443	49997	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.947091103 CEST	50003	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.947145939 CEST	443	50003	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:56.947221994 CEST	50003	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.947413921 CEST	50003	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:56.947434902 CEST	443	50003	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.484894037 CEST	443	50000	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.495170116 CEST	443	50001	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.497973919 CEST	50000	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.498006105 CEST	443	50000	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.498768091 CEST	50000	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.498774052 CEST	443	50000	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.499208927 CEST	50001	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.499243975 CEST	443	50001	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.500294924 CEST	50001	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.500302076 CEST	443	50001	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.518371105 CEST	443	49999	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.519310951 CEST	49999	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.519325972 CEST	443	49999	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.520668983 CEST	49999	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.520674944 CEST	443	49999	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.557149887 CEST	443	50002	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.558475018 CEST	50002	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.558516979 CEST	443	50002	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.559814930 CEST	50002	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.559823036 CEST	443	50002	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.626332045 CEST	443	50003	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.628737926 CEST	50003	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.628770113 CEST	443	50003	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.630342007 CEST	50003	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.630347967 CEST	443	50003	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.679248095 CEST	443	50000	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.679526091 CEST	443	50001	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.679598093 CEST	443	50001	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.679657936 CEST	50001	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.679676056 CEST	443	50001	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.679714918 CEST	443	50001	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.679759026 CEST	50001	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.679800987 CEST	50001	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.679820061 CEST	443	50001	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.679831982 CEST	50001	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.679838896 CEST	443	50001	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.680279016 CEST	443	50000	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.680332899 CEST	50000	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.681832075 CEST	50000	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.681849003 CEST	443	50000	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.687794924 CEST	50004	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.687889099 CEST	443	50004	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.687967062 CEST	50004	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.689786911 CEST	50004	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.689821959 CEST	443	50004	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.690495014 CEST	443	49999	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.691543102 CEST	50005	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.691585064 CEST	443	50005	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.691647053 CEST	50005	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.692006111 CEST	50005	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.692020893 CEST	443	50005	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.695257902 CEST	443	49999	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.695323944 CEST	49999	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.695337057 CEST	443	49999	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.695360899 CEST	443	49999	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.695450068 CEST	49999	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.695641041 CEST	49999	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.695661068 CEST	443	49999	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.699318886 CEST	50006	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.699331999 CEST	443	50006	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.699470043 CEST	50006	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.699934006 CEST	50006	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.699947119 CEST	443	50006	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.736752987 CEST	443	50002	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.736901999 CEST	443	50002	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.736957073 CEST	50002	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.737356901 CEST	50002	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.737369061 CEST	443	50002	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.740573883 CEST	50007	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.740628958 CEST	443	50007	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.740801096 CEST	50007	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.740941048 CEST	50007	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.740968943 CEST	443	50007	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.755661011 CEST	443	50003	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.756064892 CEST	443	50003	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.756124020 CEST	50003	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.756401062 CEST	50003	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.756412029 CEST	443	50003	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.756426096 CEST	50003	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.756433010 CEST	443	50003	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.758913994 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.759012938 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:57.759147882 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.759452105 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:57.759489059 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.528536081 CEST	443	50006	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.528559923 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.529088974 CEST	50006	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.529098034 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.529109001 CEST	443	50006	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.529160976 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.529532909 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.529546976 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.529592037 CEST	50006	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.529598951 CEST	443	50006	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.532968044 CEST	443	50004	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.533432961 CEST	50004	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.533468008 CEST	443	50004	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.533804893 CEST	443	50007	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.533829927 CEST	50004	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.533838034 CEST	443	50004	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.534109116 CEST	50007	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.534118891 CEST	443	50007	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.534467936 CEST	50007	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.534475088 CEST	443	50007	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.535638094 CEST	443	50005	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.536014080 CEST	50005	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.536022902 CEST	443	50005	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.536391973 CEST	50005	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.536396980 CEST	443	50005	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.645179987 CEST	443	50006	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.646630049 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.646769047 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.646842003 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.646931887 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.646931887 CEST	50008	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.646981955 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.647011995 CEST	443	50008	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.647126913 CEST	443	50006	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.647198915 CEST	50006	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.647234917 CEST	50006	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.647253036 CEST	443	50006	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.647264957 CEST	50006	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.647272110 CEST	443	50006	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.650597095 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.650639057 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.650759935 CEST	50010	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.650773048 CEST	443	50010	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.650796890 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.650831938 CEST	50010	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.650986910 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.650986910 CEST	50010	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.651005030 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.651019096 CEST	443	50010	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.657069921 CEST	443	50004	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.657130957 CEST	443	50004	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.657217026 CEST	50004	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.657226086 CEST	443	50004	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.657309055 CEST	50004	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.657380104 CEST	50004	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.657380104 CEST	50004	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.657418013 CEST	443	50004	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.657443047 CEST	443	50004	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.659642935 CEST	50011	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.659693003 CEST	443	50011	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.659782887 CEST	50011	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.659919977 CEST	50011	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.659955025 CEST	443	50011	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.662226915 CEST	443	50007	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.662297010 CEST	443	50007	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.662389040 CEST	443	50007	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.662422895 CEST	50007	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.662471056 CEST	50007	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.662506104 CEST	50007	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.662523031 CEST	443	50007	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.662544966 CEST	50007	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.662559032 CEST	443	50007	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.663013935 CEST	443	50005	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.663048029 CEST	443	50005	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.663113117 CEST	50005	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.663301945 CEST	50005	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.663311958 CEST	443	50005	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.663324118 CEST	50005	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.663328886 CEST	443	50005	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.665338039 CEST	50012	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.665427923 CEST	443	50012	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.665513992 CEST	50012	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.665594101 CEST	50013	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.665631056 CEST	443	50013	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.665712118 CEST	50013	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.665740013 CEST	50012	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.665769100 CEST	443	50012	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:58.665843964 CEST	50013	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:58.665863991 CEST	443	50013	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.338783026 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.339441061 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.339462996 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.340208054 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.340219021 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.343035936 CEST	443	50012	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.343512058 CEST	50012	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.343580961 CEST	443	50012	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.344095945 CEST	50012	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.344111919 CEST	443	50012	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.344882965 CEST	443	50013	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.345381975 CEST	50013	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.345406055 CEST	443	50013	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.345971107 CEST	50013	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.345977068 CEST	443	50013	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.353432894 CEST	443	50011	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.354156017 CEST	50011	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.354218960 CEST	443	50011	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.354981899 CEST	50011	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.354996920 CEST	443	50011	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.412838936 CEST	443	50010	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.413500071 CEST	50010	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.413516045 CEST	443	50010	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.414338112 CEST	50010	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.414345026 CEST	443	50010	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.438402891 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.438561916 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.438616991 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.439013004 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.439038038 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.439140081 CEST	50009	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.439150095 CEST	443	50009	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.441509962 CEST	443	50012	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.441793919 CEST	443	50012	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.441879034 CEST	50012	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.443475962 CEST	50014	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.443517923 CEST	443	50014	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.443753004 CEST	50012	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.443753004 CEST	50012	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.443784952 CEST	50014	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.443799019 CEST	443	50012	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.443826914 CEST	443	50012	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.445087910 CEST	50014	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.445101023 CEST	443	50014	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.445581913 CEST	443	50013	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.445621967 CEST	443	50013	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.445699930 CEST	443	50013	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.445733070 CEST	50013	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.445770025 CEST	50013	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.446131945 CEST	50013	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.446144104 CEST	443	50013	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.446156025 CEST	50013	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.446161985 CEST	443	50013	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.446989059 CEST	50015	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.447042942 CEST	443	50015	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.447117090 CEST	50015	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.447271109 CEST	50015	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.447298050 CEST	443	50015	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.450195074 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.450216055 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.450372934 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.450608015 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.450625896 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.459436893 CEST	443	50011	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.459772110 CEST	443	50011	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.459861040 CEST	50011	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.460138083 CEST	50011	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.460158110 CEST	443	50011	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.460175991 CEST	50011	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.460182905 CEST	443	50011	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.463205099 CEST	50017	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.463223934 CEST	443	50017	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.463494062 CEST	50017	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.463711023 CEST	50017	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.463721037 CEST	443	50017	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.599466085 CEST	443	50010	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.599773884 CEST	443	50010	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.599844933 CEST	50010	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.599862099 CEST	443	50010	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.599910975 CEST	443	50010	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.600114107 CEST	50010	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.600254059 CEST	50010	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.600272894 CEST	443	50010	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.600323915 CEST	50010	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.600332022 CEST	443	50010	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.604217052 CEST	50018	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.604260921 CEST	443	50018	13.107.246.60	192.168.2.6
Oct 8, 2024 21:21:59.604362011 CEST	50018	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.604538918 CEST	50018	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:21:59.604557037 CEST	443	50018	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.106738091 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.107495070 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.107532978 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.107970953 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.107983112 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.122488976 CEST	443	50014	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.123009920 CEST	50014	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.123040915 CEST	443	50014	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.123430967 CEST	50014	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.123439074 CEST	443	50014	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.134073019 CEST	443	50017	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.134484053 CEST	50017	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.134495020 CEST	443	50017	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.135236025 CEST	50017	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.135245085 CEST	443	50017	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.152792931 CEST	443	50015	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.153265953 CEST	50015	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.153305054 CEST	443	50015	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.153810024 CEST	50015	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.153820992 CEST	443	50015	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.206909895 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.207156897 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.207218885 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.207576990 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.207601070 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.214468002 CEST	50019	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.214504004 CEST	443	50019	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.214602947 CEST	50019	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.215207100 CEST	50019	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.215221882 CEST	443	50019	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.224381924 CEST	443	50014	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.225121975 CEST	443	50014	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.225224972 CEST	50014	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.225334883 CEST	50014	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.225363970 CEST	443	50014	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.225380898 CEST	50014	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.225389004 CEST	443	50014	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.234880924 CEST	443	50017	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.234955072 CEST	443	50017	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.235013008 CEST	50017	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.235028028 CEST	443	50017	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.235080004 CEST	443	50017	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.235114098 CEST	50017	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.235129118 CEST	443	50017	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.235140085 CEST	50017	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.235146046 CEST	443	50017	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.235168934 CEST	50017	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.235173941 CEST	443	50017	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.240154028 CEST	50020	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.240200996 CEST	443	50020	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.240287066 CEST	50020	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.240477085 CEST	50020	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.240492105 CEST	443	50020	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.248657942 CEST	50021	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.248696089 CEST	443	50021	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.248763084 CEST	50021	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.249018908 CEST	50021	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.249037981 CEST	443	50021	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.260639906 CEST	443	50015	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.261132002 CEST	443	50015	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.261248112 CEST	443	50015	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.261280060 CEST	50015	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.261320114 CEST	50015	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.263161898 CEST	50015	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.263183117 CEST	443	50015	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.263217926 CEST	50015	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.263226032 CEST	443	50015	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.274323940 CEST	50022	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.274363041 CEST	443	50022	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.274426937 CEST	50022	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.274931908 CEST	50022	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.274945974 CEST	443	50022	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.278170109 CEST	443	50018	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.279225111 CEST	50018	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.279256105 CEST	443	50018	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.281018972 CEST	50018	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.281028032 CEST	443	50018	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.380578041 CEST	443	50018	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.380846977 CEST	443	50018	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.380906105 CEST	50018	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.381407022 CEST	50018	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.381433964 CEST	443	50018	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.381448030 CEST	50018	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.381464005 CEST	443	50018	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.386152983 CEST	50023	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.386208057 CEST	443	50023	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.386296988 CEST	50023	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.386691093 CEST	50023	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.386703968 CEST	443	50023	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.896585941 CEST	443	50019	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.897608995 CEST	50019	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.897651911 CEST	443	50019	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.898257971 CEST	50019	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.898267031 CEST	443	50019	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.909923077 CEST	443	50021	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.910670996 CEST	443	50020	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.910840988 CEST	50021	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.910859108 CEST	443	50021	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.912019968 CEST	50021	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.912025928 CEST	443	50021	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.912693977 CEST	50020	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.912728071 CEST	443	50020	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.913685083 CEST	50020	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.913692951 CEST	443	50020	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.915195942 CEST	443	50022	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.915852070 CEST	50022	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.915865898 CEST	443	50022	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:00.916723013 CEST	50022	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:00.916728020 CEST	443	50022	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.004211903 CEST	443	50019	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.005088091 CEST	443	50019	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.005172968 CEST	50019	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.005255938 CEST	50019	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.005280972 CEST	443	50019	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.005321026 CEST	50019	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.005327940 CEST	443	50019	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.006617069 CEST	443	50021	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.006844997 CEST	443	50021	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.006897926 CEST	50021	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.006917000 CEST	443	50021	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.006936073 CEST	443	50021	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.006997108 CEST	50021	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.008466005 CEST	50021	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.008487940 CEST	443	50021	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.008502007 CEST	50021	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.008508921 CEST	443	50021	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.012085915 CEST	50024	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.012139082 CEST	443	50024	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.012219906 CEST	50024	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.013639927 CEST	50025	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.013678074 CEST	443	50025	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.013750076 CEST	50025	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.013837099 CEST	50024	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.013870955 CEST	443	50024	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.013947964 CEST	50025	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.013961077 CEST	443	50025	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.025829077 CEST	443	50022	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.026122093 CEST	443	50022	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.026190996 CEST	50022	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.026221037 CEST	50022	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.026241064 CEST	443	50022	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.026257992 CEST	50022	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.026266098 CEST	443	50022	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.030754089 CEST	50026	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.030774117 CEST	443	50026	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.030839920 CEST	50026	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.031200886 CEST	50026	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.031213045 CEST	443	50026	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.069616079 CEST	443	50023	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.070041895 CEST	443	50020	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.070178986 CEST	443	50020	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.070261002 CEST	50020	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.070370913 CEST	50023	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.070405960 CEST	443	50023	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.071296930 CEST	50023	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.071309090 CEST	443	50023	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.071496964 CEST	50020	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.071535110 CEST	443	50020	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.071561098 CEST	50020	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.071576118 CEST	443	50020	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.075999975 CEST	50027	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.076052904 CEST	443	50027	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.076124907 CEST	50027	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.076351881 CEST	50027	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.076374054 CEST	443	50027	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.174041986 CEST	443	50023	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.174242973 CEST	443	50023	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.174324989 CEST	50023	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.174546957 CEST	50023	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.174592972 CEST	443	50023	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.178836107 CEST	50028	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.178934097 CEST	443	50028	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.179030895 CEST	50028	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.179482937 CEST	50028	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.179517984 CEST	443	50028	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.669455051 CEST	443	50024	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.670176029 CEST	50024	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.670202971 CEST	443	50024	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.670825958 CEST	50024	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.670831919 CEST	443	50024	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.678307056 CEST	443	50025	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.679513931 CEST	50025	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.679538965 CEST	443	50025	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.680171967 CEST	50025	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.680176973 CEST	443	50025	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.696158886 CEST	443	50026	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.697237015 CEST	50026	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.697254896 CEST	443	50026	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.697916031 CEST	50026	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.697921038 CEST	443	50026	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.783209085 CEST	443	50024	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.783253908 CEST	443	50025	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.783318043 CEST	443	50025	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.783339977 CEST	443	50024	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.783409119 CEST	50025	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.783476114 CEST	50024	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.783823013 CEST	50025	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.783845901 CEST	443	50025	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.783859968 CEST	50025	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.783865929 CEST	443	50025	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.783919096 CEST	50024	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.783942938 CEST	443	50024	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.783970118 CEST	50024	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.783978939 CEST	443	50024	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.788254976 CEST	50029	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.788290024 CEST	443	50029	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.788326979 CEST	50030	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.788332939 CEST	443	50030	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.788374901 CEST	50029	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.788410902 CEST	50030	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.788568020 CEST	443	50027	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.788578987 CEST	50029	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.788592100 CEST	443	50029	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.788801908 CEST	50030	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.788810015 CEST	443	50030	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.789015055 CEST	50027	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.789041042 CEST	443	50027	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.789599895 CEST	50027	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.789611101 CEST	443	50027	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.797439098 CEST	443	50026	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.797818899 CEST	443	50026	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.797905922 CEST	50026	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.797965050 CEST	50026	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.797971964 CEST	443	50026	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.797986031 CEST	50026	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.797996998 CEST	443	50026	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.801290989 CEST	50031	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.801352978 CEST	443	50031	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.801423073 CEST	50031	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.801615953 CEST	50031	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.801632881 CEST	443	50031	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.875674009 CEST	443	50028	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.876338959 CEST	50028	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.876379967 CEST	443	50028	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.876982927 CEST	50028	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.876988888 CEST	443	50028	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.893377066 CEST	443	50027	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.893688917 CEST	443	50027	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.893779039 CEST	50027	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.893894911 CEST	50027	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.893922091 CEST	443	50027	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.893938065 CEST	50027	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.893945932 CEST	443	50027	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.898036957 CEST	50032	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.898087025 CEST	443	50032	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.898201942 CEST	50032	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.898403883 CEST	50032	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.898418903 CEST	443	50032	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.979115009 CEST	443	50028	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.979209900 CEST	443	50028	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.979324102 CEST	50028	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.979798079 CEST	50028	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.979820013 CEST	443	50028	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.979840040 CEST	50028	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.979847908 CEST	443	50028	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.985302925 CEST	50033	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.985368013 CEST	443	50033	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:01.985554934 CEST	50033	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.986033916 CEST	50033	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:01.986049891 CEST	443	50033	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.523144007 CEST	443	50030	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.523778915 CEST	50030	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.523802996 CEST	443	50030	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.524347067 CEST	50030	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.524352074 CEST	443	50030	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.564507961 CEST	443	50029	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.565025091 CEST	50029	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.565047979 CEST	443	50029	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.565644026 CEST	50029	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.565649986 CEST	443	50029	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.621715069 CEST	443	50031	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.622710943 CEST	50031	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.622795105 CEST	443	50031	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.623817921 CEST	50031	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.623832941 CEST	443	50031	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.624480963 CEST	443	50030	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.624551058 CEST	443	50030	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.624628067 CEST	50030	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.624643087 CEST	443	50030	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.624718904 CEST	50030	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.625049114 CEST	50030	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.625068903 CEST	443	50030	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.625080109 CEST	50030	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.625083923 CEST	443	50030	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.639084101 CEST	50034	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.639136076 CEST	443	50034	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.639198065 CEST	50034	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.639451027 CEST	50034	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.639467001 CEST	443	50034	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.651091099 CEST	443	50032	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.651452065 CEST	50032	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.651469946 CEST	443	50032	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.651886940 CEST	50032	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.651890993 CEST	443	50032	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.674333096 CEST	443	50029	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.674496889 CEST	443	50029	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.674557924 CEST	50029	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.674664974 CEST	50029	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.674674034 CEST	443	50029	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.674681902 CEST	50029	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.674685955 CEST	443	50029	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.677248955 CEST	50035	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.677282095 CEST	443	50035	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.677532911 CEST	50035	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.677661896 CEST	50035	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.677675009 CEST	443	50035	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.725281954 CEST	443	50031	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.725328922 CEST	443	50031	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.725392103 CEST	443	50031	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.725399971 CEST	50031	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.725442886 CEST	50031	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.725613117 CEST	50031	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.725668907 CEST	443	50031	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.725701094 CEST	50031	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.725717068 CEST	443	50031	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.726461887 CEST	443	50033	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.727160931 CEST	50033	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.727185965 CEST	443	50033	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.727866888 CEST	50033	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.727879047 CEST	443	50033	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.728702068 CEST	50036	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.728738070 CEST	443	50036	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.728792906 CEST	50036	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.728925943 CEST	50036	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.728941917 CEST	443	50036	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.750488043 CEST	443	50032	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.750907898 CEST	443	50032	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.750969887 CEST	50032	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.751002073 CEST	50032	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.751013041 CEST	443	50032	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.751022100 CEST	50032	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.751025915 CEST	443	50032	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.753792048 CEST	50037	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.753890038 CEST	443	50037	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.753982067 CEST	50037	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.754165888 CEST	50037	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.754204035 CEST	443	50037	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.854779005 CEST	443	50033	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.854816914 CEST	443	50033	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.854863882 CEST	443	50033	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.854883909 CEST	50033	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.854923964 CEST	50033	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.855187893 CEST	50033	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.855187893 CEST	50033	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.855226994 CEST	443	50033	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.855256081 CEST	443	50033	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.858747005 CEST	50038	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.858808994 CEST	443	50038	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:02.858939886 CEST	50038	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.859119892 CEST	50038	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:02.859134912 CEST	443	50038	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.304364920 CEST	443	50034	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.304970980 CEST	50034	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.305031061 CEST	443	50034	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.305417061 CEST	50034	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.305430889 CEST	443	50034	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.375924110 CEST	443	50036	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.376379013 CEST	50036	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.376400948 CEST	443	50036	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.376836061 CEST	50036	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.376842022 CEST	443	50036	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.415816069 CEST	443	50035	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.416239023 CEST	50035	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.416251898 CEST	443	50035	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.416630983 CEST	50035	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.416635990 CEST	443	50035	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.420917988 CEST	443	50034	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.421680927 CEST	443	50034	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.421750069 CEST	50034	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.421785116 CEST	50034	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.421802998 CEST	443	50034	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.421813965 CEST	50034	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.421818972 CEST	443	50034	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.424597025 CEST	50039	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.424623966 CEST	443	50039	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.424859047 CEST	50039	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.424981117 CEST	50039	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.424997091 CEST	443	50039	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.434914112 CEST	443	50037	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.435273886 CEST	50037	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.435336113 CEST	443	50037	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.435678959 CEST	50037	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.435693979 CEST	443	50037	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.476376057 CEST	443	50036	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.476495028 CEST	443	50036	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.476550102 CEST	50036	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.476670980 CEST	50036	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.476682901 CEST	443	50036	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.476694107 CEST	50036	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.476699114 CEST	443	50036	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.479764938 CEST	50040	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.479804993 CEST	443	50040	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.479897022 CEST	50040	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.480102062 CEST	50040	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.480113983 CEST	443	50040	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.521358013 CEST	443	50038	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.521837950 CEST	50038	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.521888971 CEST	443	50038	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.522279978 CEST	50038	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.522289991 CEST	443	50038	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.523993969 CEST	443	50035	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.525108099 CEST	443	50035	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.525300026 CEST	50035	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.525351048 CEST	50035	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.525368929 CEST	443	50035	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.525378942 CEST	50035	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.525383949 CEST	443	50035	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.528011084 CEST	50041	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.528101921 CEST	443	50041	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.528184891 CEST	50041	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.528315067 CEST	50041	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.528345108 CEST	443	50041	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.538490057 CEST	443	50037	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.538562059 CEST	443	50037	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.538677931 CEST	443	50037	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.538744926 CEST	50037	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.538790941 CEST	50037	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.538791895 CEST	50037	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.538816929 CEST	443	50037	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.538834095 CEST	443	50037	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.540916920 CEST	50042	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.540942907 CEST	443	50042	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.541049004 CEST	50042	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.541130066 CEST	50042	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.541145086 CEST	443	50042	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.622821093 CEST	443	50038	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.622967005 CEST	443	50038	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.623045921 CEST	50038	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.623136997 CEST	50038	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.623136997 CEST	50038	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.623184919 CEST	443	50038	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.623219967 CEST	443	50038	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.625783920 CEST	50043	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.625828028 CEST	443	50043	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:03.625894070 CEST	50043	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.626045942 CEST	50043	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:03.626060009 CEST	443	50043	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.073837996 CEST	443	50039	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.074485064 CEST	50039	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.074501991 CEST	443	50039	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.075130939 CEST	50039	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.075138092 CEST	443	50039	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.143187046 CEST	443	50040	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.144429922 CEST	50040	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.144429922 CEST	50040	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.144459009 CEST	443	50040	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.144470930 CEST	443	50040	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.174547911 CEST	443	50039	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.174619913 CEST	443	50039	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.174885988 CEST	50039	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.174885988 CEST	50039	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.174973965 CEST	50039	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.174990892 CEST	443	50039	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.178096056 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.178138971 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.178353071 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.178353071 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.178389072 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.186023951 CEST	443	50041	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.186494112 CEST	50041	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.186585903 CEST	443	50041	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.187100887 CEST	50041	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.187115908 CEST	443	50041	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.191534996 CEST	443	50042	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.192423105 CEST	50042	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.192423105 CEST	50042	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.192441940 CEST	443	50042	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.192464113 CEST	443	50042	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.243974924 CEST	443	50040	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.244034052 CEST	443	50040	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.244169950 CEST	50040	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.244174004 CEST	443	50040	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.244335890 CEST	50040	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.244431019 CEST	50040	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.244431019 CEST	50040	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.244452953 CEST	443	50040	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.244465113 CEST	443	50040	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.247762918 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.247853994 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.248063087 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.248133898 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.248155117 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.286926985 CEST	443	50041	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.287081957 CEST	443	50041	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.287245035 CEST	50041	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.287245035 CEST	50041	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.287358999 CEST	50041	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.287415981 CEST	443	50041	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.288132906 CEST	443	50043	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.289437056 CEST	50043	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.289463997 CEST	443	50043	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.290203094 CEST	50046	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.290206909 CEST	50043	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.290214062 CEST	443	50043	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.290277958 CEST	443	50046	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.290371895 CEST	50046	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.290494919 CEST	50046	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.290513992 CEST	443	50046	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.292824030 CEST	443	50042	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.292843103 CEST	443	50042	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.293010950 CEST	50042	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.293035030 CEST	443	50042	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.293160915 CEST	50042	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.293160915 CEST	50042	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.293179989 CEST	443	50042	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.293190956 CEST	443	50042	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.295414925 CEST	50047	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.295459032 CEST	443	50047	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.295559883 CEST	50047	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.295645952 CEST	50047	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.295653105 CEST	443	50047	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.388079882 CEST	443	50043	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.388130903 CEST	443	50043	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.388308048 CEST	443	50043	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.388464928 CEST	50043	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.388465881 CEST	50043	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.388515949 CEST	50043	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.388535023 CEST	443	50043	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.392019987 CEST	50048	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.392124891 CEST	443	50048	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.392323971 CEST	50048	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.392967939 CEST	50048	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.392996073 CEST	443	50048	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.897600889 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.922314882 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.922396898 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.929197073 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.929215908 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.966080904 CEST	443	50047	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.970906973 CEST	443	50046	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.973051071 CEST	50047	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.973078012 CEST	443	50047	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.973498106 CEST	50047	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.973505020 CEST	443	50047	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.988414049 CEST	50046	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.988468885 CEST	443	50046	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:04.993323088 CEST	50046	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:04.993339062 CEST	443	50046	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.027839899 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.027894974 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.027986050 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.028012991 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.028225899 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.029556990 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.056197882 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.056236029 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.056324959 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.056341887 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.067548990 CEST	50049	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.067590952 CEST	443	50049	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.067857027 CEST	50049	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.069020987 CEST	50049	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.069036961 CEST	443	50049	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.087661028 CEST	443	50048	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.090944052 CEST	50048	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.090979099 CEST	443	50048	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.091949940 CEST	50048	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.091965914 CEST	443	50048	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.095643044 CEST	443	50047	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.095731974 CEST	443	50047	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.096154928 CEST	50047	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.096154928 CEST	50047	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.096209049 CEST	50047	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.096224070 CEST	443	50047	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.100666046 CEST	50050	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.100704908 CEST	443	50050	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.100812912 CEST	50050	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.102710009 CEST	443	50046	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.102873087 CEST	443	50046	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.103053093 CEST	50046	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.103832960 CEST	50046	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.103832960 CEST	50046	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.103862047 CEST	443	50046	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.103884935 CEST	443	50046	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.106939077 CEST	50050	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.106962919 CEST	443	50050	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.114954948 CEST	50051	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.115025997 CEST	443	50051	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.119004011 CEST	50051	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.119688988 CEST	50051	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.119725943 CEST	443	50051	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.197488070 CEST	443	50048	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.197583914 CEST	443	50048	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.197688103 CEST	50048	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.197968960 CEST	50048	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.197969913 CEST	50048	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.197999001 CEST	443	50048	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.198016882 CEST	443	50048	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.204181910 CEST	50053	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.204232931 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.204368114 CEST	50053	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.204818010 CEST	50053	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.204835892 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.709084034 CEST	443	50049	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.728136063 CEST	50049	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.728173971 CEST	443	50049	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.729531050 CEST	50049	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.729537964 CEST	443	50049	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.758369923 CEST	443	50051	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.758935928 CEST	50051	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.758944988 CEST	443	50051	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.759664059 CEST	50051	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.759670019 CEST	443	50051	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.800314903 CEST	443	50050	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.800707102 CEST	50050	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.800715923 CEST	443	50050	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.801192045 CEST	50050	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.801196098 CEST	443	50050	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.827416897 CEST	443	50049	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.827578068 CEST	443	50049	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.827672958 CEST	50049	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.827857971 CEST	50049	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.827863932 CEST	443	50049	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.827888012 CEST	50049	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.827893019 CEST	443	50049	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.830729008 CEST	50054	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.830745935 CEST	443	50054	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.830807924 CEST	50054	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.831212044 CEST	50054	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.831227064 CEST	443	50054	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.871788025 CEST	443	50051	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.871862888 CEST	443	50051	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.871926069 CEST	50051	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.871937990 CEST	443	50051	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.872071028 CEST	443	50051	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.872168064 CEST	50051	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.872219086 CEST	50051	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.872226954 CEST	443	50051	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.872241020 CEST	50051	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.872246981 CEST	443	50051	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.873492002 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.874115944 CEST	50053	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.874129057 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.874614000 CEST	50053	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.874619007 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.875655890 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.875677109 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.875798941 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.875907898 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.875920057 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.904865980 CEST	443	50050	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.904921055 CEST	443	50050	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.904967070 CEST	50050	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.904982090 CEST	443	50050	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.905025005 CEST	50050	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.905047894 CEST	443	50050	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.905086040 CEST	50050	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.905246973 CEST	50050	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.905260086 CEST	443	50050	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.905277014 CEST	50050	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.905282021 CEST	443	50050	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.908013105 CEST	50056	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.908052921 CEST	443	50056	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.908231020 CEST	50056	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.908391953 CEST	50056	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.908405066 CEST	443	50056	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.975945950 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.976006031 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.976056099 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.976064920 CEST	50053	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.976083994 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:05.976131916 CEST	50053	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:05.976131916 CEST	50053	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.062195063 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.062280893 CEST	50053	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.062292099 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.062429905 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.062493086 CEST	50053	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.065840960 CEST	50053	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.065840960 CEST	50053	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.065851927 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.065860033 CEST	443	50053	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.075701952 CEST	50057	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.075733900 CEST	443	50057	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.075794935 CEST	50057	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.076000929 CEST	50057	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.076009989 CEST	443	50057	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.525129080 CEST	443	50054	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.526757002 CEST	50054	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.526767015 CEST	443	50054	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.528561115 CEST	50054	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.528564930 CEST	443	50054	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.553119898 CEST	443	50056	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.554820061 CEST	50056	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.554889917 CEST	443	50056	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.556200981 CEST	50056	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.556215048 CEST	443	50056	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.630937099 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.631892920 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.631963015 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.633275032 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.633291006 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.649734020 CEST	443	50054	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.649765968 CEST	443	50054	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.649822950 CEST	50054	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.649835110 CEST	443	50054	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.649847031 CEST	443	50054	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.649918079 CEST	50054	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.650609016 CEST	50054	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.650616884 CEST	443	50054	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.650625944 CEST	50054	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.650629997 CEST	443	50054	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.659574986 CEST	443	50056	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.659665108 CEST	443	50056	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.659744978 CEST	50056	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.659811974 CEST	443	50056	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.659843922 CEST	443	50056	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.659858942 CEST	50056	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.659904957 CEST	50056	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.660232067 CEST	50058	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.660296917 CEST	443	50058	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.660361052 CEST	50058	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.662585020 CEST	50056	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.662615061 CEST	443	50056	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.662663937 CEST	50056	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.662678957 CEST	443	50056	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.666996956 CEST	50058	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.667017937 CEST	443	50058	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.670463085 CEST	50059	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.670512915 CEST	443	50059	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.670583010 CEST	50059	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.671633005 CEST	50059	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.671664000 CEST	443	50059	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.738334894 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.738392115 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.738500118 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.738569975 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.738656044 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.756083965 CEST	443	50057	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.773912907 CEST	50057	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.773955107 CEST	443	50057	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.775322914 CEST	50057	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.775331974 CEST	443	50057	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.828345060 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.828437090 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.828515053 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.828515053 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.885751009 CEST	443	50057	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.885804892 CEST	443	50057	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.885852098 CEST	50057	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.885890961 CEST	443	50057	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.885946989 CEST	443	50057	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.885993004 CEST	50057	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.986720085 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.986828089 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.986871004 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.986891985 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.990703106 CEST	50057	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.990753889 CEST	443	50057	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:06.990770102 CEST	50057	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:06.990781069 CEST	443	50057	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.006042004 CEST	50060	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.006153107 CEST	443	50060	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.006236076 CEST	50060	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.009840012 CEST	50061	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.009881973 CEST	443	50061	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.009938955 CEST	50061	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.010600090 CEST	50060	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.010638952 CEST	443	50060	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.012739897 CEST	50061	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.012753010 CEST	443	50061	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.358185053 CEST	443	50059	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.358783007 CEST	50059	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.358835936 CEST	443	50059	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.359530926 CEST	50059	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.359539986 CEST	443	50059	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.376394033 CEST	443	50058	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.377351046 CEST	50058	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.377351046 CEST	50058	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.377386093 CEST	443	50058	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.377413988 CEST	443	50058	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.530374050 CEST	443	50058	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.530791044 CEST	443	50058	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.530929089 CEST	50058	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.531405926 CEST	50058	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.531419992 CEST	443	50058	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.534503937 CEST	50062	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.534545898 CEST	443	50062	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.534807920 CEST	50062	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.534807920 CEST	50062	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.534837961 CEST	443	50062	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.537735939 CEST	443	50059	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.537858009 CEST	443	50059	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.537950993 CEST	50059	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.538031101 CEST	50059	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.538031101 CEST	50059	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.538077116 CEST	443	50059	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.538103104 CEST	443	50059	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.540323973 CEST	50063	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.540402889 CEST	443	50063	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.540623903 CEST	50063	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.540623903 CEST	50063	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.540694952 CEST	443	50063	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.759300947 CEST	443	50061	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.760449886 CEST	50061	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.760488033 CEST	443	50061	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.762983084 CEST	50061	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.762990952 CEST	443	50061	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.846010923 CEST	443	50060	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.846949100 CEST	50060	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.847012043 CEST	443	50060	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.847843885 CEST	50060	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.847860098 CEST	443	50060	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.880338907 CEST	443	50061	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.880564928 CEST	443	50061	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.880908012 CEST	50061	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.881351948 CEST	50061	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.881372929 CEST	443	50061	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.881401062 CEST	50061	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.881407022 CEST	443	50061	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.886959076 CEST	50064	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.887003899 CEST	443	50064	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.887404919 CEST	50064	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.887404919 CEST	50064	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.887434006 CEST	443	50064	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.949275970 CEST	443	50060	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.949495077 CEST	443	50060	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.949904919 CEST	50060	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.950001955 CEST	50060	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.950001955 CEST	50060	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.950042963 CEST	443	50060	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.950054884 CEST	443	50060	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.957689047 CEST	50065	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.957801104 CEST	443	50065	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:07.957987070 CEST	50065	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.961931944 CEST	50065	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:07.961971045 CEST	443	50065	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.232331991 CEST	443	50062	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.236545086 CEST	443	50063	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.238086939 CEST	50066	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:08.238107920 CEST	443	50066	40.113.103.199	192.168.2.6
Oct 8, 2024 21:22:08.238162041 CEST	50066	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:08.240367889 CEST	50066	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:08.240380049 CEST	443	50066	40.113.103.199	192.168.2.6
Oct 8, 2024 21:22:08.241517067 CEST	50062	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.241532087 CEST	443	50062	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.243100882 CEST	50062	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.243108034 CEST	443	50062	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.245538950 CEST	50063	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.245585918 CEST	443	50063	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.246897936 CEST	50063	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.246912956 CEST	443	50063	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.343494892 CEST	443	50062	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.343568087 CEST	443	50062	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.343622923 CEST	50062	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.343656063 CEST	443	50062	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.343693018 CEST	443	50062	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.343739986 CEST	50062	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.344530106 CEST	50062	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.344547033 CEST	443	50062	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.344556093 CEST	50062	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.344561100 CEST	443	50062	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.347090960 CEST	443	50063	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.347696066 CEST	443	50063	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.347757101 CEST	50063	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.348177910 CEST	50063	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.348227978 CEST	443	50063	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.348258018 CEST	50063	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.348275900 CEST	443	50063	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.354211092 CEST	50067	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.354249954 CEST	443	50067	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.354305983 CEST	50067	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.354809999 CEST	50067	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.354824066 CEST	443	50067	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.539047956 CEST	443	50064	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.570995092 CEST	50064	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.571007967 CEST	443	50064	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.571681976 CEST	50064	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.571687937 CEST	443	50064	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.616929054 CEST	443	50065	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.630701065 CEST	50065	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.630770922 CEST	443	50065	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.631937981 CEST	50065	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.631953955 CEST	443	50065	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.670412064 CEST	443	50064	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.670495033 CEST	443	50064	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.670542002 CEST	50064	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.706077099 CEST	50064	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.706098080 CEST	443	50064	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.730216026 CEST	443	50065	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.730532885 CEST	443	50065	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.730585098 CEST	50065	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.749701977 CEST	50065	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.749732971 CEST	443	50065	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.749752998 CEST	50065	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.749762058 CEST	443	50065	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.950732946 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.952177048 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.952178001 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:08.952210903 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:08.952229977 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.012927055 CEST	443	50067	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.013516903 CEST	50067	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:09.013534069 CEST	443	50067	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.014086962 CEST	50067	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:09.014092922 CEST	443	50067	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.056644917 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.056699991 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.056749105 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:09.056770086 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.056888103 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.056943893 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:09.057003975 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:09.057019949 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.057032108 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:09.057037115 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.058595896 CEST	443	50066	40.113.103.199	192.168.2.6
Oct 8, 2024 21:22:09.058675051 CEST	50066	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:09.060832024 CEST	50066	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:09.060849905 CEST	443	50066	40.113.103.199	192.168.2.6
Oct 8, 2024 21:22:09.061167002 CEST	443	50066	40.113.103.199	192.168.2.6
Oct 8, 2024 21:22:09.063422918 CEST	50066	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:09.063467026 CEST	50066	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:09.063477993 CEST	443	50066	40.113.103.199	192.168.2.6
Oct 8, 2024 21:22:09.063618898 CEST	50066	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:09.107417107 CEST	443	50066	40.113.103.199	192.168.2.6
Oct 8, 2024 21:22:09.114337921 CEST	443	50067	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.114423037 CEST	443	50067	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.114479065 CEST	50067	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:09.114736080 CEST	50067	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:09.114746094 CEST	443	50067	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.114757061 CEST	50067	443	192.168.2.6	13.107.246.60
Oct 8, 2024 21:22:09.114762068 CEST	443	50067	13.107.246.60	192.168.2.6
Oct 8, 2024 21:22:09.240696907 CEST	443	50066	40.113.103.199	192.168.2.6
Oct 8, 2024 21:22:09.241409063 CEST	443	50066	40.113.103.199	192.168.2.6
Oct 8, 2024 21:22:09.241626024 CEST	50066	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:09.241801977 CEST	50066	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:09.241842985 CEST	443	50066	40.113.103.199	192.168.2.6
Oct 8, 2024 21:22:09.241885900 CEST	50066	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:13.110137939 CEST	50069	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:22:13.110186100 CEST	443	50069	142.250.181.228	192.168.2.6
Oct 8, 2024 21:22:13.110249996 CEST	50069	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:22:13.110498905 CEST	50069	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:22:13.110507965 CEST	443	50069	142.250.181.228	192.168.2.6
Oct 8, 2024 21:22:13.755335093 CEST	443	50069	142.250.181.228	192.168.2.6
Oct 8, 2024 21:22:13.756091118 CEST	50069	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:22:13.756115913 CEST	443	50069	142.250.181.228	192.168.2.6
Oct 8, 2024 21:22:13.756804943 CEST	443	50069	142.250.181.228	192.168.2.6
Oct 8, 2024 21:22:13.759923935 CEST	50069	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:22:13.760008097 CEST	443	50069	142.250.181.228	192.168.2.6
Oct 8, 2024 21:22:13.811408043 CEST	50069	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:22:23.666572094 CEST	443	50069	142.250.181.228	192.168.2.6
Oct 8, 2024 21:22:23.666748047 CEST	443	50069	142.250.181.228	192.168.2.6
Oct 8, 2024 21:22:23.667087078 CEST	50069	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:22:24.217900991 CEST	49899	443	192.168.2.6	52.97.135.98
Oct 8, 2024 21:22:24.217916012 CEST	443	49899	52.97.135.98	192.168.2.6
Oct 8, 2024 21:22:24.253360987 CEST	50069	443	192.168.2.6	142.250.181.228
Oct 8, 2024 21:22:24.253392935 CEST	443	50069	142.250.181.228	192.168.2.6
Oct 8, 2024 21:22:33.664381981 CEST	50071	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:33.664427042 CEST	443	50071	40.113.103.199	192.168.2.6
Oct 8, 2024 21:22:33.664494038 CEST	50071	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:33.665148020 CEST	50071	443	192.168.2.6	40.113.103.199
Oct 8, 2024 21:22:33.665168047 CEST	443	50071	40.113.103.199	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 8, 2024 21:21:09.681117058 CEST	53	63933	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:09.692116976 CEST	53	62406	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:10.737149000 CEST	53	60207	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:10.823860884 CEST	58749	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:10.824038029 CEST	50574	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:10.831963062 CEST	53	58749	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:10.832190990 CEST	53	50574	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:11.882586002 CEST	60339	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:11.882669926 CEST	65511	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:13.062197924 CEST	51756	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:13.062400103 CEST	53958	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:13.069804907 CEST	53	51756	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:13.069834948 CEST	53	53958	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:15.511473894 CEST	61593	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:15.511826038 CEST	63738	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:15.635030031 CEST	64904	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:15.635030031 CEST	56899	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:15.642168999 CEST	53	64904	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:15.642941952 CEST	53	56899	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:18.924040079 CEST	63269	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:18.927079916 CEST	62178	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:18.930917025 CEST	53	63269	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:18.935029984 CEST	53	62178	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:20.284045935 CEST	53	57470	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:20.315656900 CEST	63511	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:20.315841913 CEST	58558	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:28.324016094 CEST	53	65186	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:29.191289902 CEST	56091	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:29.191715002 CEST	57256	53	192.168.2.6	1.1.1.1
Oct 8, 2024 21:21:29.198250055 CEST	53	56091	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:29.199892998 CEST	53	57256	1.1.1.1	192.168.2.6
Oct 8, 2024 21:21:48.092031956 CEST	53	57754	1.1.1.1	192.168.2.6
Oct 8, 2024 21:22:08.656928062 CEST	53	58212	1.1.1.1	192.168.2.6
Oct 8, 2024 21:22:10.635445118 CEST	53	57083	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 8, 2024 21:21:20.338068962 CEST	192.168.2.6	1.1.1.1	c27c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 8, 2024 21:21:10.823860884 CEST	192.168.2.6	1.1.1.1	0x8adc	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:10.824038029 CEST	192.168.2.6	1.1.1.1	0xdb7b	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
Oct 8, 2024 21:21:11.882586002 CEST	192.168.2.6	1.1.1.1	0x3265	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:11.882669926 CEST	192.168.2.6	1.1.1.1	0x248b	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 8, 2024 21:21:13.062197924 CEST	192.168.2.6	1.1.1.1	0x50c2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:13.062400103 CEST	192.168.2.6	1.1.1.1	0xbced	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 8, 2024 21:21:15.511473894 CEST	192.168.2.6	1.1.1.1	0x5838	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:15.511826038 CEST	192.168.2.6	1.1.1.1	0xf6e	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Oct 8, 2024 21:21:15.635030031 CEST	192.168.2.6	1.1.1.1	0x3834	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:15.635030031 CEST	192.168.2.6	1.1.1.1	0x5375	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 8, 2024 21:21:18.924040079 CEST	192.168.2.6	1.1.1.1	0x1099	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:18.927079916 CEST	192.168.2.6	1.1.1.1	0x2785	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
Oct 8, 2024 21:21:20.315656900 CEST	192.168.2.6	1.1.1.1	0x7129	Standard query (0)	r4.res.office365.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:20.315841913 CEST	192.168.2.6	1.1.1.1	0x3136	Standard query (0)	r4.res.office365.com	65	IN (0x0001)	false
Oct 8, 2024 21:21:29.191289902 CEST	192.168.2.6	1.1.1.1	0xed83	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:29.191715002 CEST	192.168.2.6	1.1.1.1	0x355c	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 8, 2024 21:21:10.831963062 CEST	1.1.1.1	192.168.2.6	0x8adc	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:10.831963062 CEST	1.1.1.1	192.168.2.6	0x8adc	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:10.831963062 CEST	1.1.1.1	192.168.2.6	0x8adc	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:10.831963062 CEST	1.1.1.1	192.168.2.6	0x8adc	No error (0)	HHN-efz.ms-acdc.office.com		52.97.135.98	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:10.831963062 CEST	1.1.1.1	192.168.2.6	0x8adc	No error (0)	HHN-efz.ms-acdc.office.com		40.99.150.18	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:10.831963062 CEST	1.1.1.1	192.168.2.6	0x8adc	No error (0)	HHN-efz.ms-acdc.office.com		52.98.152.178	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:10.831963062 CEST	1.1.1.1	192.168.2.6	0x8adc	No error (0)	HHN-efz.ms-acdc.office.com		52.98.243.50	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:10.832190990 CEST	1.1.1.1	192.168.2.6	0xdb7b	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:10.832190990 CEST	1.1.1.1	192.168.2.6	0xdb7b	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:10.832190990 CEST	1.1.1.1	192.168.2.6	0xdb7b	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:11.890158892 CEST	1.1.1.1	192.168.2.6	0x3265	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:11.890968084 CEST	1.1.1.1	192.168.2.6	0x248b	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:13.069804907 CEST	1.1.1.1	192.168.2.6	0x50c2	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:13.069834948 CEST	1.1.1.1	192.168.2.6	0xbced	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 8, 2024 21:21:13.082072020 CEST	1.1.1.1	192.168.2.6	0xc1f7	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:13.082072020 CEST	1.1.1.1	192.168.2.6	0xc1f7	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:15.519218922 CEST	1.1.1.1	192.168.2.6	0x5838	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:15.521136045 CEST	1.1.1.1	192.168.2.6	0xf6e	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:15.642168999 CEST	1.1.1.1	192.168.2.6	0x3834	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:15.642168999 CEST	1.1.1.1	192.168.2.6	0x3834	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:15.642168999 CEST	1.1.1.1	192.168.2.6	0x3834	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:15.642941952 CEST	1.1.1.1	192.168.2.6	0x5375	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:15.642941952 CEST	1.1.1.1	192.168.2.6	0x5375	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:16.233163118 CEST	1.1.1.1	192.168.2.6	0xee4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:16.233163118 CEST	1.1.1.1	192.168.2.6	0xee4	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:18.930917025 CEST	1.1.1.1	192.168.2.6	0x1099	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:18.930917025 CEST	1.1.1.1	192.168.2.6	0x1099	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:18.930917025 CEST	1.1.1.1	192.168.2.6	0x1099	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:18.930917025 CEST	1.1.1.1	192.168.2.6	0x1099	No error (0)	HHN-efz.ms-acdc.office.com		52.98.243.34	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:18.930917025 CEST	1.1.1.1	192.168.2.6	0x1099	No error (0)	HHN-efz.ms-acdc.office.com		52.98.179.34	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:18.930917025 CEST	1.1.1.1	192.168.2.6	0x1099	No error (0)	HHN-efz.ms-acdc.office.com		40.99.149.210	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:18.930917025 CEST	1.1.1.1	192.168.2.6	0x1099	No error (0)	HHN-efz.ms-acdc.office.com		40.99.150.82	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:18.935029984 CEST	1.1.1.1	192.168.2.6	0x2785	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:18.935029984 CEST	1.1.1.1	192.168.2.6	0x2785	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:18.935029984 CEST	1.1.1.1	192.168.2.6	0x2785	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:20.324345112 CEST	1.1.1.1	192.168.2.6	0x7129	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:20.338006020 CEST	1.1.1.1	192.168.2.6	0x3136	No error (0)	r4.res.office365.com	r4.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:24.167857885 CEST	1.1.1.1	192.168.2.6	0x5ca8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:24.167857885 CEST	1.1.1.1	192.168.2.6	0x5ca8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:29.198250055 CEST	1.1.1.1	192.168.2.6	0xed83	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:29.198250055 CEST	1.1.1.1	192.168.2.6	0xed83	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:29.198250055 CEST	1.1.1.1	192.168.2.6	0xed83	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:29.198250055 CEST	1.1.1.1	192.168.2.6	0xed83	No error (0)	FRA-efz.ms-acdc.office.com		52.98.253.146	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:29.198250055 CEST	1.1.1.1	192.168.2.6	0xed83	No error (0)	FRA-efz.ms-acdc.office.com		52.98.178.242	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:29.198250055 CEST	1.1.1.1	192.168.2.6	0xed83	No error (0)	FRA-efz.ms-acdc.office.com		40.99.149.162	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:29.199892998 CEST	1.1.1.1	192.168.2.6	0x355c	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:29.199892998 CEST	1.1.1.1	192.168.2.6	0x355c	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:29.199892998 CEST	1.1.1.1	192.168.2.6	0x355c	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 8, 2024 21:21:39.937681913 CEST	1.1.1.1	192.168.2.6	0xf4da	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:21:39.937681913 CEST	1.1.1.1	192.168.2.6	0xf4da	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:22:02.881871939 CEST	1.1.1.1	192.168.2.6	0x72df	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 8, 2024 21:22:02.881871939 CEST	1.1.1.1	192.168.2.6	0x72df	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

outlook.office365.com

https:

aadcdn.msauth.net

otelrules.azureedge.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49713	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:10 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 52 4d 38 35 67 71 6c 30 2b 55 6d 53 4d 53 5a 45 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 63 38 61 64 61 65 63 61 30 63 61 34 38 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: RM85gql0+UmSMSZE.1Context: 3bc8adaeca0ca48e
2024-10-08 19:21:10 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-08 19:21:10 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 52 4d 38 35 67 71 6c 30 2b 55 6d 53 4d 53 5a 45 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 63 38 61 64 61 65 63 61 30 63 61 34 38 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 45 43 34 76 54 63 4a 41 56 54 6b 4d 33 4a 48 55 31 72 78 56 69 76 5a 56 5a 68 54 59 30 59 36 62 34 31 7a 52 51 42 46 53 41 52 4b 63 66 6b 45 43 72 78 2f 61 41 47 30 6b 34 7a 47 4b 70 4e 47 57 6a 71 4c 6c 4a 36 4c 4b 77 52 71 6f 70 71 75 79 6f 6b 53 70 33 49 32 32 7a 74 78 70 61 41 39 55 66 49 47 66 49 2b 6d 61 4d 48 66 69 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: RM85gql0+UmSMSZE.2Context: 3bc8adaeca0ca48e<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUEC4vTcJAVTkM3JHU1rxVivZVZhTY0Y6b41zRQBFSARKcfkECrx/aAG0k4zGKpNGWjqLlJ6LKwRqopquyokSp3I22ztxpaA9UfIGfI+maMHfi
2024-10-08 19:21:10 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 52 4d 38 35 67 71 6c 30 2b 55 6d 53 4d 53 5a 45 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 63 38 61 64 61 65 63 61 30 63 61 34 38 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: RM85gql0+UmSMSZE.3Context: 3bc8adaeca0ca48e<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-08 19:21:10 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-08 19:21:10 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 54 56 4d 47 7a 45 36 68 74 55 57 44 68 52 52 32 62 2b 32 7a 72 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: TVMGzE6htUWDhRR2b+2zrQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49717	52.97.135.98	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:11 UTC	799	OUT	GET /owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cSN7PR19MB66126F57B7EFCF40B749C3FE847E2%40SN7PR19MB6612.namprd19.prod.outlook.com%3e HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:11 UTC	7120	IN	HTTP/1.1 302 Content-Length: 926 Content-Type: text/html; charset=utf-8 Location: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=ebcc48e2-30e8-194c-9fd2-d374bec8336e&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12&state=VYtLDoIwFEVB14IzSn_00QExASFxoDG6gtI-jREoAdQtuGyZOHBw7uDknjAIgvXCaiGkywSgRKYkZZwCg5QDUEWkFUZp3cRaZ00sG6djw62N4eoAXWoNMh4u7SdM_Nsk29cd35132OZnNO6A02RuuJ-x2-z7Gcce55_b5ZGwlyOczkwfCqUYV3UKBVR1WUtagNSlqKtMQsUjSf-OpDfdMDqmyTB6R_xzbr1_EOu7SOAX Server: Microsoft-IIS/10.0 request-id: ebcc48e2-30e8-194c-9fd2-d374bec8336e Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedFETarget: BE1P281CU032.internal.outlook.com X-BackEndHttpStatus: 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: ClientId=B318D9A06B544A718D95CEA76353EAC8; expires=Wed, 08-Oct-2025 19:21:11 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=B318D9A06B544A718D95CEA76353EAC8; expires=Wed, 08-Oct-2025 19:21:11 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Tue, 08-Apr-2025 19:21:11 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.0tgEVfSKyAdfNUVh5YjvzF0kH6wQrbxmxjAi0wgU8Gw=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12; expires=Tue, 08-Oct-2024 20:21:11 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: ClientId=B318D9A06B544A718D95CEA76353EAC8; expires=Wed, 08-Oct-2025 19:21:11 GMT; path=/;SameSite=None; secure Set-Cookie: OIDC=1; expires=Tue, 08-Apr-2025 19:21:11 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.0tgEVfSKyAdfNUVh5YjvzF0kH6wQrbxmxjAi0wgU8Gw=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12; expires=Tue, 08-Oct-2024 20:21:11 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Sat, 08-Oct-1994 19:21:11 GMT; path=/; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=ArLym14B7KywXs7n3Ag; expires=Wed, 09-Oct-2024 01:23:11 GMT; path=/;SameSite=None; secure; HttpOnly X-CalculatedBETarget: BEXP281MB0039.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-DiagnosticsInfo: 5;0;0; X-BackEnd-Begin: 2024-10-08T19:21:11.752 X-BackEnd-End: 2024-10-08T19:21:11.768 X-DiagInfo: BEXP281MB0039 X-BEServer: BEXP281MB0039 X-UA-Compatible: IE=EmulateIE7 X-ResponseOrigin: OwaAppPool X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 302 X-FEProxyInfo: FR3P281CA0083.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-FEServer: BE1P281CA0476 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=HHN&RemoteIP=8.46.123.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: HHN X-FEServer: FR3P281CA0083 Date: Tue, 08 Oct 2024 19:21:11 GMT Connection: close
2024-10-08 19:21:11 UTC	926	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 30 30 30 30 30 30 30 32 2d 30 30 30 30 2d 30 66 66 31 2d 63 65 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 25 32 66 6f 77 61 25 32 66 26 61 6d 70 3b 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49722	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:13 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:13 UTC	797	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:13 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: 7389aafb-501e-0076-0da0-19491e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192113Z-1657d5bbd48lknvp09v995n79000000004x0000000013s48 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:13 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-10-08 19:21:13 UTC	16384	IN	Data Raw: a1 fe a6 75 c8 0d 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 93 60 94 84 63 3e bb 8d 4e f6 d7 4e 72 4b bf 55 91 07 da 56 22 Data Ascii: u';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3`c>NNrKUV"
2024-10-08 19:21:13 UTC	16384	IN	Data Raw: 49 49 78 a3 6d 90 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd 34 e0 24 b4 0d 56 b1 61 56 94 05 d2 f1 9b 06 fa d6 bf 56 69 91 Data Ascii: IIxmO_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n4$VaVVi
2024-10-08 19:21:13 UTC	1449	IN	Data Raw: 45 2f 63 f8 e4 e0 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 36 07 87 17 11 46 47 79 ad 8b 01 fd 00 09 4b 55 8e 3a 38 8f 1e Data Ascii: E/chl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp6FGyKU:8

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49728	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:16 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:16 UTC	540	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:16 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 08 Oct 2024 05:32:11 GMT ETag: "0x8DCE75A8F43FDF4" x-ms-request-id: 6f3499de-501e-008f-5174-199054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192116Z-1657d5bbd48t66tjar5xuq22r800000005d000000000d1z6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:16 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49730	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:16 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:16 UTC	775	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:16 GMT Content-Type: text/css Content-Length: 20414 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 03 Jul 2024 21:48:08 GMT ETag: 0x8DC9BA9D4131BFD x-ms-request-id: f757fcd7-e01e-0054-575e-17fbbe000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192116Z-1657d5bbd48gqrfwecymhhbfm8000000046000000000q5cy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:16 UTC	15609	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-10-08 19:21:16 UTC	4805	IN	Data Raw: 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 5d 71 27 8b f1 12 Data Ascii: }h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.+76s^]q'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49731	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:16 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:16 UTC	792	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:16 GMT Content-Type: application/x-javascript Content-Length: 122193 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 01:33:09 GMT ETag: 0x8DCCC8188A08D46 x-ms-request-id: 015b66e4-901e-004e-41c0-169a61000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192116Z-1657d5bbd48lknvp09v995n79000000004zg00000000u1fu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:16 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 51 58 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 ef c8 8e 99 5b 0a 83 52 18 95 bc c0 09 a3 59 18 d9 09 8b 4b 53 f8 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsQXOix)NK7KW`G/.=[RYKS7l4i)ydY$.^@R%oJgP7(70Vj#Yi,*<zcs0I)b
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: 7e fe 9d 70 17 86 b2 5a 68 c6 d8 53 99 2b af 38 61 68 21 9b ce f0 76 06 77 2f b1 8a f6 1c e0 29 00 38 c8 06 c3 b2 0a 2b df 30 39 1d 64 f6 0d 4f 7a e2 7e 34 6d 3a 9a 00 0c 34 01 08 95 1f a4 6f 71 e1 37 9b b1 78 a5 1c ea ef e8 81 02 0a d3 b1 1d 3d 65 57 f3 d1 f7 33 e7 1d 77 84 3e 5b e4 6f 88 37 0e 56 73 7f 47 df 2d 25 77 ad 3e cb 46 b1 09 fd 59 e9 9a c6 25 5e 69 86 3d a4 ea 02 54 96 92 e8 0a dd c2 1a 8f 36 b8 e8 31 2b aa 16 b9 42 96 2b 1f f5 5b f8 9d e1 36 fa d1 00 84 23 1a 82 2d d1 a8 e4 55 1d 39 d3 31 2c 3a 0c 18 07 db b4 66 53 10 09 0c e7 b8 eb e1 00 b8 8f 67 e8 6b fa e2 d9 63 2f 68 1b f4 cd 05 5f 49 5f d2 84 a2 d5 ed ad f3 4c d4 f3 44 d8 0b 44 4c 5c 78 f3 82 ab 26 01 e4 a3 c7 f5 32 bb 60 81 8c 06 67 3a 21 1f 45 b4 1c 02 ad c9 fa cc a4 dc 68 35 2a 3a ba Data Ascii: ~pZhS+8ah!vw/)8+09dOz~4m:4oq7x=eW3w>[o7VsG-%w>FY%^i=T61+B+[6#-U91,:fSgkc/h_I_LDDL\x&2`g:!Eh5*:
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: 0d e2 04 ad c1 bb 90 2b c3 9b df 13 1b 27 31 62 9a df 88 b4 22 90 79 9f bc 0f 9c 27 11 fb 1f b8 72 a6 d3 af de 87 e3 dd 83 c3 37 64 0e c5 fd 5c 9d 61 05 a8 a8 c7 32 2f 55 dd 9b 53 55 9e d8 44 8b 91 7e 0a 94 60 d1 1a 25 3d 4c a7 67 62 6e 14 d4 3d c4 dd 94 09 78 03 83 b1 98 8c 98 fa 44 64 c2 09 39 8c 7b 11 12 01 b7 84 d2 68 0b 3f 42 3a 43 9e 37 ea 66 1f 11 96 d2 99 0b de 60 31 6c 06 7e 1f 60 2f e5 2b 1b 5c 43 6a dd 95 0d ee cc 69 5c a5 09 1f 25 9d b5 6c f7 bc 62 11 b4 c2 84 82 a9 45 99 57 f5 2c 9d e8 c5 38 e0 86 3e a7 79 15 8b 8b 56 aa 40 4d 64 ec bc 31 ab ab 6d 1e 6e 1b c3 dc 45 ef e1 4c 03 88 3c c8 3e b0 fe 39 35 52 5e c9 79 43 d9 d1 ca d5 54 a3 b6 ee c4 5d a8 6b 63 07 30 7d a6 73 b4 dd 65 ba 72 a1 7a df 6c a7 fe fe d6 5e 4e e4 90 95 6e 23 32 12 c4 1a 55 Data Ascii: +'1b"y'r7d\a2/USUD~`%=Lgbn=xDd9{h?B:C7f`1l~`/+\Cji\%lbEW,8>yV@Md1mnEL<>95R^yCT]kc0}serzl^Nn#2U
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: ce f2 fe e8 1a b9 e3 49 f2 26 1c 0f 1f 45 ee 29 dd dd b3 30 20 25 b2 3c 1f 46 65 59 b4 27 33 de a0 d8 84 6d 8d 13 e9 7b 19 fd 2c 29 1a f9 07 fb 09 37 13 1e 81 af e3 38 d7 1a 8a bf c1 36 cf d0 b6 42 7c 9d 14 e0 d0 ef c9 18 43 4d c5 77 71 59 77 8e 86 e0 a6 ee b8 6d 25 93 bb 6e 34 d6 c5 bd 30 36 1f 71 7d 0a 29 8b 9e fd d3 20 11 52 2b a4 a9 df a3 6b 09 78 22 6a b0 e5 b4 03 2f 7f 92 e6 f1 e0 f1 f3 4d 94 b0 19 60 76 9a a7 23 28 93 76 42 3f c6 88 36 5d bb 46 a9 01 63 8f b8 42 99 64 e6 92 d1 19 60 eb 35 2a 5c 4d f2 80 57 d1 4d fa 51 56 f9 b1 c1 12 09 54 6e 43 94 2a ec a1 e3 f3 ac 01 44 68 83 84 57 8d 1f d1 6f d0 8f 2e e0 09 bd 70 82 4f 6d de 88 b3 06 4a 70 95 cf 7f 44 bc d8 56 9c 5a 0d 87 8d 74 00 d3 43 f9 aa 30 27 f7 48 f1 e7 7d 97 ec 41 df 0b ab 6f 63 6a 6a 99 Data Ascii: I&E)0 %<FeY'3m{,)786B\|CMwqYwm%n406q}) R+kx"j/M`v#(vB?6]FcBd`5\MWMQVTnCDhWo.pOmJpDVZtC0'H}Aocjj
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f 16 b5 36 49 01 f9 99 3e cf 46 45 9c df 70 be 0d 1e 85 fe 33 ed 87 06 bf 78 64 42 a2 03 be a2 0f 92 e1 4a 73 fa 08 1a 35 fe 39 bf 8e 9c 9a 34 94 48 08 3d 8d b1 ad 19 96 66 3b 2a ab ae 60 84 ac bf 74 3a b2 04 69 0e a4 71 ea 6c 6a f6 bc a2 fa 6a e1 19 28 41 f3 40 09 7f 2b b7 21 10 05 39 0d 1d 7c e6 ed f6 2e 69 dc 7f 12 45 d1 08 f8 1d b0 cb 41 22 66 e0 e6 cc 3b 69 60 1c 9a 87 30 93 c0 11 da 2c 85 94 58 61 06 19 8a 3d 84 c3 a8 44 19 66 35 9d e2 26 23 96 13 55 97 30 19 53 44 9b 78 fa 7c 5f ca ac 66 f2 68 83 f3 b8 08 91 50 70 67 01 e8 36 d0 56 81 59 a7 1e f1 da 42 be c7 d0 f5 cb a1 83 f4 1b 8c 78 5c 7d a4 db 2b 40 c2 64 41 45 d3 8e 38 d9 b4 4d 48 3b 4f 45 41 18 a2 c3 86 1a c5 b9 2f 25 1d b1 44 20 Data Ascii: r&XLV~ZYo6I>FEp3xdBJs594H=f;*`t:iqljj(A@+!9\|.iEA"f;i`0,Xa=Df5&#U0SDx\|_fhPpg6VYBx\}+@dAE8MH;OEA/%D
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 2c 70 02 11 db 98 d7 fd 90 93 9f 3a 09 d8 4d e0 fb 22 4f a2 38 08 12 4c 58 96 44 61 92 24 79 c0 c1 25 f6 d2 4d 2d a1 52 1b 24 94 3b ae 00 c5 e6 5e 62 fb 89 1b 78 18 4e 90 88 3c b0 59 76 37 ef d3 5a 67 69 ec 70 16 b9 3c 70 d5 bf be c7 38 88 2a 89 73 df 06 52 38 ee dd 1c 76 ab dd 84 86 47 64 11 b8 76 9e 81 ab 4a 3b b4 c1 29 64 ec 05 22 64 36 13 3e 8f f7 43 bc 61 9a f0 50 d8 e0 a2 b6 90 49 06 8e 0a 36 94 83 b5 63 f1 42 3f 12 c1 7e ba 89 0c ee b9 81 88 3c 96 b9 b1 0b 29 Data Ascii: Egq"IXL(abnj75M6:-O@b&^, L02\^z~"]IX,=,p:M"O8LXDa$y%M-R$;^bxN<Yv7Zgip<p8sR8vGdvJ;)d"d6>CaPI6cB?~<)
2024-10-08 19:21:16 UTC	16384	IN	Data Raw: 8f d8 ea d9 9b bf ec dc 0e b2 86 d1 dd cf 1b 69 ae d2 87 20 3b f3 54 bf dc e8 39 98 92 df 9b e9 ad fa 56 bd f6 87 4d fd d5 09 2b 7f 60 b4 19 bd 5c 57 63 fe 76 e1 f8 44 e1 4d eb 56 ce cf ca 85 e1 99 6b 46 fe fa e7 2f c7 e3 f0 f9 bc 2a 5f a6 2f 43 db cb df 2e 09 6d 93 6d fc ed 27 a8 4e 67 a6 55 fb 42 bd 32 7c f9 79 ff 5e 15 95 06 f7 79 b3 cf de f6 6c d6 2f ff de 4c d0 b2 e0 66 95 e4 1b c6 df 68 75 5a 49 b2 b6 4b 7e 29 f3 3b 45 7e 35 f5 e6 d3 86 c8 49 f5 b7 f9 e3 52 c8 e7 05 26 bd de 5c da c9 00 69 9a fb 8d 94 9f 7f 52 40 81 90 87 74 8b d8 97 a5 ff fc 53 cd cc 93 55 2e bc 7c 7d 07 9a df 99 8e ee 84 bf bf be 46 ad 7d da 44 8b bf 2a 5a 69 99 a1 14 ea 2f 0c 99 ee a4 4c cf 2a 96 cb f4 2e 3a 75 5d f5 ee aa f5 ae aa eb dd 94 bb a2 7a c9 2e 49 ce cd 95 5e fa 53 55 Data Ascii: i ;T9VM+`\WcvDMVkF/_/C.mm'NgUB2\|y^yl/LfhuZIK~);E~5IR&\iR@tSU.\|}F}DZi/L*.:u]z.I^SU
2024-10-08 19:21:16 UTC	8297	IN	Data Raw: 44 5d 0b 2d 94 1e 42 c1 d7 11 0b b1 0e 2a 15 3c 8f e9 63 3a 55 74 59 09 2e b5 00 1f e3 aa bd 03 35 07 6f 63 52 84 e7 2f 6d 92 c1 e9 10 89 6f ae 45 64 ba b3 43 a5 af 97 81 17 65 a6 74 2d 26 19 e0 80 9e a0 b0 1d df 68 09 61 20 c0 85 83 29 61 48 2a cd e5 cf 7e 0c d2 57 4b 07 9f 78 e2 49 14 5d ce 09 3e 99 f3 27 2f 6d 97 38 30 1e 7c b6 e4 cf 4e 38 0a 33 4c d5 40 bd e9 d0 e1 50 24 7f 1e c3 bf b1 06 0f 4e 81 10 48 7c 90 24 91 1b 20 ed 03 48 60 11 18 c0 df 52 33 97 8f 0d 06 a7 3c 12 12 8f 96 45 c9 f6 12 df 00 07 55 bc 63 54 71 cd 81 80 87 c9 0c c9 f0 fc 90 cd e8 24 9c df 9c 84 58 fe 14 b4 11 18 8c a3 2c 8c d0 3b 09 05 72 21 3d 3f 79 c2 e0 8a 58 f5 91 88 53 0a 1e 03 57 fb 24 b5 72 e2 fb 78 24 c9 09 e7 35 b1 e3 10 7d 02 b4 2b ba f2 ef 43 7b 99 5e 89 cc e2 2f b4 19 Data Ascii: D]-B<c:UtY.5ocR/moEdCet-&ha )aH~WKxI]>'/m80\|N83L@P$NH\|$ H`R3<EUcTq$X,;r!=?yXSW$rx$5}+C{^/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49736	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:17 UTC	408	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:17 UTC	797	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:17 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: 7389aafb-501e-0076-0da0-19491e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192117Z-1657d5bbd48gjrh9ymem1nvr1n00000000v0000000009gwu x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:17 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-10-08 19:21:17 UTC	16384	IN	Data Raw: a1 fe a6 75 c8 0d 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 93 60 94 84 63 3e bb 8d 4e f6 d7 4e 72 4b bf 55 91 07 da 56 22 Data Ascii: u';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3`c>NNrKUV"
2024-10-08 19:21:17 UTC	16384	IN	Data Raw: 49 49 78 a3 6d 90 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd 34 e0 24 b4 0d 56 b1 61 56 94 05 d2 f1 9b 06 fa d6 bf 56 69 91 Data Ascii: IIxmO_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n4$VaVVi
2024-10-08 19:21:17 UTC	1449	IN	Data Raw: 45 2f 63 f8 e4 e0 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 36 07 87 17 11 46 47 79 ad 8b 01 fd 00 09 4b 55 8e 3a 38 8f 1e Data Ascii: E/chl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp6FGyKU:8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49733	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-08 19:21:17 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=77065 Date: Tue, 08 Oct 2024 19:21:17 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49738	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:17 UTC	577	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:18 UTC	791	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:17 GMT Content-Type: application/x-javascript Content-Length: 61052 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 25 May 2023 17:22:47 GMT ETag: 0x8DB5D44A8CEE4F4 x-ms-request-id: 2bcbd45e-201e-006f-34d6-16f608000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192117Z-1657d5bbd48qjg85buwfdynm5w00000005h000000000b67q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:18 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2024-10-08 19:21:18 UTC	16384	IN	Data Raw: 45 5f ae b8 15 0a 6b 9f 0b 6f 06 46 14 14 a0 01 d4 75 81 77 09 f9 14 b6 80 d5 55 f7 1d da c5 86 b6 4e 3c e4 1f ba 37 9b b7 b5 c3 23 d4 c8 84 ec 45 b0 c9 37 15 f4 52 19 68 52 db 84 ba 3a 93 b3 c0 d0 32 cd 34 96 c5 e1 77 a8 86 82 5b a0 e4 0c 44 e8 9f fe b7 62 f3 e2 12 ef cd f4 45 86 1d 76 a9 ca dd 36 79 da 4e 84 b4 06 0b 02 f6 93 7c 32 6b 9e 1f 01 48 1d b9 b0 1d 0e 45 73 ff 0a 48 49 e1 df 50 90 3f 40 e9 4f 5c e1 0c 8a 9e 20 e1 3d f7 f7 d8 4d ad e8 59 f6 8d fc 90 12 fc 6f ee 36 ee 97 d9 84 b2 55 80 c3 3d dc ed cb 9b 20 58 b6 fb e2 12 a8 93 cc bb ce 09 d9 17 b7 1b 9e c3 3b 01 49 81 06 e2 8a cd c8 00 2b 23 63 ac 8c 91 a8 99 6f 92 81 56 7b 8e f7 8d b2 42 9c 4a 97 0c 0b bf 45 f5 d2 62 f4 5e b0 ec 3b b3 a4 63 b8 24 72 e0 05 15 1f 7d e2 3d 3f 37 19 0f e3 4b d8 f3 Data Ascii: E_koFuwUN<7#E7RhR:24w[DbEv6yN\|2kHEsHIP?@O\ =MYo6U= X;I+#coV{BJEb^;c$r}=?7K
2024-10-08 19:21:18 UTC	16384	IN	Data Raw: 6d 6f 68 90 c6 f2 9e eb 33 2a c7 18 89 31 56 eb 59 ec bb 71 89 7f aa 93 e3 73 84 51 29 6d 4a 14 bb 22 63 6f 55 2c 47 e7 05 5d 5b 13 bf a6 ac 26 93 2d 98 72 a5 b7 e5 5a dc 5a c8 41 d4 fd e4 3e 1d 71 da 8f 3c 15 aa a8 02 27 5f eb 0a 69 e7 9e 8a 73 ab 65 64 09 18 b0 07 f0 47 1a e5 af 1f a1 b3 aa 6f 4a be 45 d8 0b 7b 11 7c 72 79 14 0f bd 57 cd 6e 76 d1 ec b5 e1 b3 8d 9d 95 66 c2 ca 10 cd 0f a3 7c 90 c5 ac c9 5a ae fa 7f c2 e6 88 97 22 c9 e1 52 b2 22 5d 8a f0 0f 96 12 40 d3 a5 e8 7c be 94 98 1b 2d 25 d5 4c 26 46 3d 61 3a 5c 4a 00 f5 97 a2 e2 77 4b d1 f9 c9 52 72 ef 6a 29 b9 77 6c 21 fc db 40 f8 5d c6 fc 1b 37 be c9 6d fc 7a 4e 9b e8 e0 a1 68 5f 34 7d d6 b3 76 7a fe 9b e8 2e 1e 44 9c d8 a2 fa f9 8d 92 11 d2 4d a4 6e 0a 47 ef 48 fc 1c f5 39 69 8b 0e 7f d4 a7 84 Data Ascii: moh3*1VYqsQ)mJ"coU,G][&-rZZA>q<'_isedGoJE{\|ryWnvf\|Z"R"]@\|-%L&F=a:\JwKRrj)wl!@]7mzNh_4}vz.DMnGH9i
2024-10-08 19:21:18 UTC	12691	IN	Data Raw: 05 12 73 65 5f 43 ee b5 a6 0a 6e 83 08 03 ba f6 3a d7 c1 f5 6c 76 ab 4e 60 47 68 19 58 60 f5 1f 5e bb c3 54 de 2e 80 82 4f c9 76 ef a4 d4 b5 72 0a ee 68 55 55 91 83 40 67 5f dc f5 4a 1c f6 94 3e 3d 7d 79 a0 3e 39 55 07 e7 28 38 b8 38 65 d6 f5 5b 91 70 12 1c 69 47 2b 47 a6 a3 95 0e 6d 81 13 58 fc 26 42 bf 8e 1d ad 38 fe 3e ed 53 99 91 95 ee 68 64 66 52 9b 89 03 08 8d 1b 82 51 74 a5 1c f1 3a ed 15 45 74 3b 29 5e 35 bb d6 fb fa 7a db 7a 27 1a 93 ee 23 3d 44 bf 15 6d ad 43 c0 d2 64 91 ac 81 29 f3 92 ec 05 5f 59 d7 da da 65 be a6 3f da b7 38 0a be 24 da e8 8d 01 b8 41 ae b4 0b ff d2 ba a5 24 85 d5 3e 9e 97 b0 f2 d1 73 cf a0 45 b4 57 a1 27 69 f7 9e 79 d0 2d 71 2f 29 4f 51 86 ce 20 a4 8e 6f 80 45 9c a5 63 47 7c 28 33 2f 2a 99 bd c0 49 d2 0d 4e f3 57 e8 09 fe a7 Data Ascii: se_Cn:lvN`GhX`^T.OvrhUU@g_J>=}y>9U(88e[piG+GmX&B8>ShdfRQt:Et;)^5zz'#=DmCd)_Ye?8$A$>sEW'iy-q/)OQ oEcG\|(3/*INW

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49742	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:18 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b27588a3-a01e-003d-6001-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192118Z-1657d5bbd48lknvp09v995n790000000052g00000000b0yr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:18 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49740	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:18 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:18 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192118Z-1657d5bbd48q6t9vvmrkd293mg00000005f0000000003yum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:18 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49739	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:18 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:18 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192118Z-1657d5bbd48xsz2nuzq4vfrzg800000005c0000000001p2y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:18 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49741	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:18 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:18 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192118Z-1657d5bbd48jwrqbupe3ktsx9w00000005hg00000000vrqt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:18 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49744	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:18 UTC	410	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:18 UTC	792	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:18 GMT Content-Type: application/x-javascript Content-Length: 122193 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 01:33:09 GMT ETag: 0x8DCCC8188A08D46 x-ms-request-id: 015b66e4-901e-004e-41c0-169a61000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192118Z-1657d5bbd48jwrqbupe3ktsx9w00000005qg000000002g7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:18 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 51 58 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 ef c8 8e 99 5b 0a 83 52 18 95 bc c0 09 a3 59 18 d9 09 8b 4b 53 f8 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsQXOix)NK7KW`G/.=[RYKS7l4i)ydY$.^@R%oJgP7(70Vj#Yi,*<zcs0I)b
2024-10-08 19:21:18 UTC	16384	IN	Data Raw: 7e fe 9d 70 17 86 b2 5a 68 c6 d8 53 99 2b af 38 61 68 21 9b ce f0 76 06 77 2f b1 8a f6 1c e0 29 00 38 c8 06 c3 b2 0a 2b df 30 39 1d 64 f6 0d 4f 7a e2 7e 34 6d 3a 9a 00 0c 34 01 08 95 1f a4 6f 71 e1 37 9b b1 78 a5 1c ea ef e8 81 02 0a d3 b1 1d 3d 65 57 f3 d1 f7 33 e7 1d 77 84 3e 5b e4 6f 88 37 0e 56 73 7f 47 df 2d 25 77 ad 3e cb 46 b1 09 fd 59 e9 9a c6 25 5e 69 86 3d a4 ea 02 54 96 92 e8 0a dd c2 1a 8f 36 b8 e8 31 2b aa 16 b9 42 96 2b 1f f5 5b f8 9d e1 36 fa d1 00 84 23 1a 82 2d d1 a8 e4 55 1d 39 d3 31 2c 3a 0c 18 07 db b4 66 53 10 09 0c e7 b8 eb e1 00 b8 8f 67 e8 6b fa e2 d9 63 2f 68 1b f4 cd 05 5f 49 5f d2 84 a2 d5 ed ad f3 4c d4 f3 44 d8 0b 44 4c 5c 78 f3 82 ab 26 01 e4 a3 c7 f5 32 bb 60 81 8c 06 67 3a 21 1f 45 b4 1c 02 ad c9 fa cc a4 dc 68 35 2a 3a ba Data Ascii: ~pZhS+8ah!vw/)8+09dOz~4m:4oq7x=eW3w>[o7VsG-%w>FY%^i=T61+B+[6#-U91,:fSgkc/h_I_LDDL\x&2`g:!Eh5*:
2024-10-08 19:21:18 UTC	16384	IN	Data Raw: 0d e2 04 ad c1 bb 90 2b c3 9b df 13 1b 27 31 62 9a df 88 b4 22 90 79 9f bc 0f 9c 27 11 fb 1f b8 72 a6 d3 af de 87 e3 dd 83 c3 37 64 0e c5 fd 5c 9d 61 05 a8 a8 c7 32 2f 55 dd 9b 53 55 9e d8 44 8b 91 7e 0a 94 60 d1 1a 25 3d 4c a7 67 62 6e 14 d4 3d c4 dd 94 09 78 03 83 b1 98 8c 98 fa 44 64 c2 09 39 8c 7b 11 12 01 b7 84 d2 68 0b 3f 42 3a 43 9e 37 ea 66 1f 11 96 d2 99 0b de 60 31 6c 06 7e 1f 60 2f e5 2b 1b 5c 43 6a dd 95 0d ee cc 69 5c a5 09 1f 25 9d b5 6c f7 bc 62 11 b4 c2 84 82 a9 45 99 57 f5 2c 9d e8 c5 38 e0 86 3e a7 79 15 8b 8b 56 aa 40 4d 64 ec bc 31 ab ab 6d 1e 6e 1b c3 dc 45 ef e1 4c 03 88 3c c8 3e b0 fe 39 35 52 5e c9 79 43 d9 d1 ca d5 54 a3 b6 ee c4 5d a8 6b 63 07 30 7d a6 73 b4 dd 65 ba 72 a1 7a df 6c a7 fe fe d6 5e 4e e4 90 95 6e 23 32 12 c4 1a 55 Data Ascii: +'1b"y'r7d\a2/USUD~`%=Lgbn=xDd9{h?B:C7f`1l~`/+\Cji\%lbEW,8>yV@Md1mnEL<>95R^yCT]kc0}serzl^Nn#2U
2024-10-08 19:21:18 UTC	16384	IN	Data Raw: ce f2 fe e8 1a b9 e3 49 f2 26 1c 0f 1f 45 ee 29 dd dd b3 30 20 25 b2 3c 1f 46 65 59 b4 27 33 de a0 d8 84 6d 8d 13 e9 7b 19 fd 2c 29 1a f9 07 fb 09 37 13 1e 81 af e3 38 d7 1a 8a bf c1 36 cf d0 b6 42 7c 9d 14 e0 d0 ef c9 18 43 4d c5 77 71 59 77 8e 86 e0 a6 ee b8 6d 25 93 bb 6e 34 d6 c5 bd 30 36 1f 71 7d 0a 29 8b 9e fd d3 20 11 52 2b a4 a9 df a3 6b 09 78 22 6a b0 e5 b4 03 2f 7f 92 e6 f1 e0 f1 f3 4d 94 b0 19 60 76 9a a7 23 28 93 76 42 3f c6 88 36 5d bb 46 a9 01 63 8f b8 42 99 64 e6 92 d1 19 60 eb 35 2a 5c 4d f2 80 57 d1 4d fa 51 56 f9 b1 c1 12 09 54 6e 43 94 2a ec a1 e3 f3 ac 01 44 68 83 84 57 8d 1f d1 6f d0 8f 2e e0 09 bd 70 82 4f 6d de 88 b3 06 4a 70 95 cf 7f 44 bc d8 56 9c 5a 0d 87 8d 74 00 d3 43 f9 aa 30 27 f7 48 f1 e7 7d 97 ec 41 df 0b ab 6f 63 6a 6a 99 Data Ascii: I&E)0 %<FeY'3m{,)786B\|CMwqYwm%n406q}) R+kx"j/M`v#(vB?6]FcBd`5\MWMQVTnCDhWo.pOmJpDVZtC0'H}Aocjj
2024-10-08 19:21:18 UTC	16384	IN	Data Raw: ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f 16 b5 36 49 01 f9 99 3e cf 46 45 9c df 70 be 0d 1e 85 fe 33 ed 87 06 bf 78 64 42 a2 03 be a2 0f 92 e1 4a 73 fa 08 1a 35 fe 39 bf 8e 9c 9a 34 94 48 08 3d 8d b1 ad 19 96 66 3b 2a ab ae 60 84 ac bf 74 3a b2 04 69 0e a4 71 ea 6c 6a f6 bc a2 fa 6a e1 19 28 41 f3 40 09 7f 2b b7 21 10 05 39 0d 1d 7c e6 ed f6 2e 69 dc 7f 12 45 d1 08 f8 1d b0 cb 41 22 66 e0 e6 cc 3b 69 60 1c 9a 87 30 93 c0 11 da 2c 85 94 58 61 06 19 8a 3d 84 c3 a8 44 19 66 35 9d e2 26 23 96 13 55 97 30 19 53 44 9b 78 fa 7c 5f ca ac 66 f2 68 83 f3 b8 08 91 50 70 67 01 e8 36 d0 56 81 59 a7 1e f1 da 42 be c7 d0 f5 cb a1 83 f4 1b 8c 78 5c 7d a4 db 2b 40 c2 64 41 45 d3 8e 38 d9 b4 4d 48 3b 4f 45 41 18 a2 c3 86 1a c5 b9 2f 25 1d b1 44 20 Data Ascii: r&XLV~ZYo6I>FEp3xdBJs594H=f;*`t:iqljj(A@+!9\|.iEA"f;i`0,Xa=Df5&#U0SDx\|_fhPpg6VYBx\}+@dAE8MH;OEA/%D
2024-10-08 19:21:18 UTC	16384	IN	Data Raw: 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 2c 70 02 11 db 98 d7 fd 90 93 9f 3a 09 d8 4d e0 fb 22 4f a2 38 08 12 4c 58 96 44 61 92 24 79 c0 c1 25 f6 d2 4d 2d a1 52 1b 24 94 3b ae 00 c5 e6 5e 62 fb 89 1b 78 18 4e 90 88 3c b0 59 76 37 ef d3 5a 67 69 ec 70 16 b9 3c 70 d5 bf be c7 38 88 2a 89 73 df 06 52 38 ee dd 1c 76 ab dd 84 86 47 64 11 b8 76 9e 81 ab 4a 3b b4 c1 29 64 ec 05 22 64 36 13 3e 8f f7 43 bc 61 9a f0 50 d8 e0 a2 b6 90 49 06 8e 0a 36 94 83 b5 63 f1 42 3f 12 c1 7e ba 89 0c ee b9 81 88 3c 96 b9 b1 0b 29 Data Ascii: Egq"IXL(abnj75M6:-O@b&^, L02\^z~"]IX,=,p:M"O8LXDa$y%M-R$;^bxN<Yv7Zgip<p8sR8vGdvJ;)d"d6>CaPI6cB?~<)
2024-10-08 19:21:18 UTC	16384	IN	Data Raw: 8f d8 ea d9 9b bf ec dc 0e b2 86 d1 dd cf 1b 69 ae d2 87 20 3b f3 54 bf dc e8 39 98 92 df 9b e9 ad fa 56 bd f6 87 4d fd d5 09 2b 7f 60 b4 19 bd 5c 57 63 fe 76 e1 f8 44 e1 4d eb 56 ce cf ca 85 e1 99 6b 46 fe fa e7 2f c7 e3 f0 f9 bc 2a 5f a6 2f 43 db cb df 2e 09 6d 93 6d fc ed 27 a8 4e 67 a6 55 fb 42 bd 32 7c f9 79 ff 5e 15 95 06 f7 79 b3 cf de f6 6c d6 2f ff de 4c d0 b2 e0 66 95 e4 1b c6 df 68 75 5a 49 b2 b6 4b 7e 29 f3 3b 45 7e 35 f5 e6 d3 86 c8 49 f5 b7 f9 e3 52 c8 e7 05 26 bd de 5c da c9 00 69 9a fb 8d 94 9f 7f 52 40 81 90 87 74 8b d8 97 a5 ff fc 53 cd cc 93 55 2e bc 7c 7d 07 9a df 99 8e ee 84 bf bf be 46 ad 7d da 44 8b bf 2a 5a 69 99 a1 14 ea 2f 0c 99 ee a4 4c cf 2a 96 cb f4 2e 3a 75 5d f5 ee aa f5 ae aa eb dd 94 bb a2 7a c9 2e 49 ce cd 95 5e fa 53 55 Data Ascii: i ;T9VM+`\WcvDMVkF/_/C.mm'NgUB2\|y^yl/LfhuZIK~);E~5IR&\iR@tSU.\|}F}DZi/L*.:u]z.I^SU
2024-10-08 19:21:18 UTC	8297	IN	Data Raw: 44 5d 0b 2d 94 1e 42 c1 d7 11 0b b1 0e 2a 15 3c 8f e9 63 3a 55 74 59 09 2e b5 00 1f e3 aa bd 03 35 07 6f 63 52 84 e7 2f 6d 92 c1 e9 10 89 6f ae 45 64 ba b3 43 a5 af 97 81 17 65 a6 74 2d 26 19 e0 80 9e a0 b0 1d df 68 09 61 20 c0 85 83 29 61 48 2a cd e5 cf 7e 0c d2 57 4b 07 9f 78 e2 49 14 5d ce 09 3e 99 f3 27 2f 6d 97 38 30 1e 7c b6 e4 cf 4e 38 0a 33 4c d5 40 bd e9 d0 e1 50 24 7f 1e c3 bf b1 06 0f 4e 81 10 48 7c 90 24 91 1b 20 ed 03 48 60 11 18 c0 df 52 33 97 8f 0d 06 a7 3c 12 12 8f 96 45 c9 f6 12 df 00 07 55 bc 63 54 71 cd 81 80 87 c9 0c c9 f0 fc 90 cd e8 24 9c df 9c 84 58 fe 14 b4 11 18 8c a3 2c 8c d0 3b 09 05 72 21 3d 3f 79 c2 e0 8a 58 f5 91 88 53 0a 1e 03 57 fb 24 b5 72 e2 fb 78 24 c9 09 e7 35 b1 e3 10 7d 02 b4 2b ba f2 ef 43 7b 99 5e 89 cc e2 2f b4 19 Data Ascii: D]-B<c:UtY.5ocR/moEdCet-&ha )aH~WKxI]>'/m80\|N83L@P$NH\|$ H`R3<EUcTq$X,;r!=?yXSW$rx$5}+C{^/

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49743	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:18 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:18 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:18 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c62b5fc1-401e-0067-3a60-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192118Z-1657d5bbd487nf59mzf5b3gk8n0000000540000000004145 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:18 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-08 19:21:18 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=77000 Date: Tue, 08 Oct 2024 19:21:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-08 19:21:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49729	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:18 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:18 UTC	791	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:18 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: 53b33480-d01e-0009-4dfb-16b928000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192118Z-1657d5bbd48xdq5dkwwugdpzr000000005sg000000009usv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:18 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-08 19:21:18 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49747	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:18 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192119Z-1657d5bbd48vhs7r2p1ky7cs5w00000005tg000000004vyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49748	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:18 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192119Z-1657d5bbd48jwrqbupe3ktsx9w00000005hg00000000vrvp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49749	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:19 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192119Z-1657d5bbd48gqrfwecymhhbfm8000000045000000000vrtf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49751	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:19 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:19 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192119Z-1657d5bbd48lknvp09v995n79000000004y000000000z573 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:19 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49750	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:19 UTC	392	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:19 UTC	791	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:19 GMT Content-Type: application/x-javascript Content-Length: 61052 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 25 May 2023 17:22:47 GMT ETag: 0x8DB5D44A8CEE4F4 x-ms-request-id: 2bcbd45e-201e-006f-34d6-16f608000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192119Z-1657d5bbd48vhs7r2p1ky7cs5w00000005sg0000000098f8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:19 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2024-10-08 19:21:19 UTC	16384	IN	Data Raw: 45 5f ae b8 15 0a 6b 9f 0b 6f 06 46 14 14 a0 01 d4 75 81 77 09 f9 14 b6 80 d5 55 f7 1d da c5 86 b6 4e 3c e4 1f ba 37 9b b7 b5 c3 23 d4 c8 84 ec 45 b0 c9 37 15 f4 52 19 68 52 db 84 ba 3a 93 b3 c0 d0 32 cd 34 96 c5 e1 77 a8 86 82 5b a0 e4 0c 44 e8 9f fe b7 62 f3 e2 12 ef cd f4 45 86 1d 76 a9 ca dd 36 79 da 4e 84 b4 06 0b 02 f6 93 7c 32 6b 9e 1f 01 48 1d b9 b0 1d 0e 45 73 ff 0a 48 49 e1 df 50 90 3f 40 e9 4f 5c e1 0c 8a 9e 20 e1 3d f7 f7 d8 4d ad e8 59 f6 8d fc 90 12 fc 6f ee 36 ee 97 d9 84 b2 55 80 c3 3d dc ed cb 9b 20 58 b6 fb e2 12 a8 93 cc bb ce 09 d9 17 b7 1b 9e c3 3b 01 49 81 06 e2 8a cd c8 00 2b 23 63 ac 8c 91 a8 99 6f 92 81 56 7b 8e f7 8d b2 42 9c 4a 97 0c 0b bf 45 f5 d2 62 f4 5e b0 ec 3b b3 a4 63 b8 24 72 e0 05 15 1f 7d e2 3d 3f 37 19 0f e3 4b d8 f3 Data Ascii: E_koFuwUN<7#E7RhR:24w[DbEv6yN\|2kHEsHIP?@O\ =MYo6U= X;I+#coV{BJEb^;c$r}=?7K
2024-10-08 19:21:19 UTC	16384	IN	Data Raw: 6d 6f 68 90 c6 f2 9e eb 33 2a c7 18 89 31 56 eb 59 ec bb 71 89 7f aa 93 e3 73 84 51 29 6d 4a 14 bb 22 63 6f 55 2c 47 e7 05 5d 5b 13 bf a6 ac 26 93 2d 98 72 a5 b7 e5 5a dc 5a c8 41 d4 fd e4 3e 1d 71 da 8f 3c 15 aa a8 02 27 5f eb 0a 69 e7 9e 8a 73 ab 65 64 09 18 b0 07 f0 47 1a e5 af 1f a1 b3 aa 6f 4a be 45 d8 0b 7b 11 7c 72 79 14 0f bd 57 cd 6e 76 d1 ec b5 e1 b3 8d 9d 95 66 c2 ca 10 cd 0f a3 7c 90 c5 ac c9 5a ae fa 7f c2 e6 88 97 22 c9 e1 52 b2 22 5d 8a f0 0f 96 12 40 d3 a5 e8 7c be 94 98 1b 2d 25 d5 4c 26 46 3d 61 3a 5c 4a 00 f5 97 a2 e2 77 4b d1 f9 c9 52 72 ef 6a 29 b9 77 6c 21 fc db 40 f8 5d c6 fc 1b 37 be c9 6d fc 7a 4e 9b e8 e0 a1 68 5f 34 7d d6 b3 76 7a fe 9b e8 2e 1e 44 9c d8 a2 fa f9 8d 92 11 d2 4d a4 6e 0a 47 ef 48 fc 1c f5 39 69 8b 0e 7f d4 a7 84 Data Ascii: moh3*1VYqsQ)mJ"coU,G][&-rZZA>q<'_isedGoJE{\|ryWnvf\|Z"R"]@\|-%L&F=a:\JwKRrj)wl!@]7mzNh_4}vz.DMnGH9i
2024-10-08 19:21:19 UTC	12691	IN	Data Raw: 05 12 73 65 5f 43 ee b5 a6 0a 6e 83 08 03 ba f6 3a d7 c1 f5 6c 76 ab 4e 60 47 68 19 58 60 f5 1f 5e bb c3 54 de 2e 80 82 4f c9 76 ef a4 d4 b5 72 0a ee 68 55 55 91 83 40 67 5f dc f5 4a 1c f6 94 3e 3d 7d 79 a0 3e 39 55 07 e7 28 38 b8 38 65 d6 f5 5b 91 70 12 1c 69 47 2b 47 a6 a3 95 0e 6d 81 13 58 fc 26 42 bf 8e 1d ad 38 fe 3e ed 53 99 91 95 ee 68 64 66 52 9b 89 03 08 8d 1b 82 51 74 a5 1c f1 3a ed 15 45 74 3b 29 5e 35 bb d6 fb fa 7a db 7a 27 1a 93 ee 23 3d 44 bf 15 6d ad 43 c0 d2 64 91 ac 81 29 f3 92 ec 05 5f 59 d7 da da 65 be a6 3f da b7 38 0a be 24 da e8 8d 01 b8 41 ae b4 0b ff d2 ba a5 24 85 d5 3e 9e 97 b0 f2 d1 73 cf a0 45 b4 57 a1 27 69 f7 9e 79 d0 2d 71 2f 29 4f 51 86 ce 20 a4 8e 6f 80 45 9c a5 63 47 7c 28 33 2f 2a 99 bd c0 49 d2 0d 4e f3 57 e8 09 fe a7 Data Ascii: se_Cn:lvN`GhX`^T.OvrhUU@g_J>=}y>9U(88e[piG+GmX&B8>ShdfRQt:Et;)^5zz'#=DmCd)_Ye?8$A$>sEW'iy-q/)OQ oEcG\|(3/*INW

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49746	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:19 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 39 72 77 4a 62 6c 56 4e 56 45 4b 67 59 65 69 6f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 38 64 34 37 62 35 38 61 31 36 37 64 32 62 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 9rwJblVNVEKgYeio.1Context: 48d47b58a167d2b9
2024-10-08 19:21:19 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-08 19:21:19 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 39 72 77 4a 62 6c 56 4e 56 45 4b 67 59 65 69 6f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 38 64 34 37 62 35 38 61 31 36 37 64 32 62 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 45 43 34 76 54 63 4a 41 56 54 6b 4d 33 4a 48 55 31 72 78 56 69 76 5a 56 5a 68 54 59 30 59 36 62 34 31 7a 52 51 42 46 53 41 52 4b 63 66 6b 45 43 72 78 2f 61 41 47 30 6b 34 7a 47 4b 70 4e 47 57 6a 71 4c 6c 4a 36 4c 4b 77 52 71 6f 70 71 75 79 6f 6b 53 70 33 49 32 32 7a 74 78 70 61 41 39 55 66 49 47 66 49 2b 6d 61 4d 48 66 69 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 9rwJblVNVEKgYeio.2Context: 48d47b58a167d2b9<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUEC4vTcJAVTkM3JHU1rxVivZVZhTY0Y6b41zRQBFSARKcfkECrx/aAG0k4zGKpNGWjqLlJ6LKwRqopquyokSp3I22ztxpaA9UfIGfI+maMHfi
2024-10-08 19:21:19 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 39 72 77 4a 62 6c 56 4e 56 45 4b 67 59 65 69 6f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 38 64 34 37 62 35 38 61 31 36 37 64 32 62 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 9rwJblVNVEKgYeio.3Context: 48d47b58a167d2b9<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-08 19:21:19 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-08 19:21:19 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 37 6a 61 2f 32 6c 5a 36 41 30 4b 4f 50 5a 74 2f 56 6d 4d 59 43 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 7ja/2lZ6A0KOPZt/VmMYCw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49752	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:19 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:19 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192119Z-1657d5bbd48wd55zet5pcra0cg00000005d000000000bdxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:19 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49753	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:19 UTC	429	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:19 UTC	791	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:19 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: 53b33480-d01e-0009-4dfb-16b928000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192119Z-1657d5bbd48dfrdj7px744zp8s000000052000000000y3m6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:19 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-08 19:21:19 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49754	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:19 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:19 UTC	813	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:19 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 79f19b76-201e-004b-80d6-1648ba000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192119Z-1657d5bbd48vlsxxpe15ac3q7n00000005cg00000000gpdf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-08 19:21:19 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-08 19:21:19 UTC	16384	IN	Data Raw: c6 f1 60 48 76 39 a2 ca 7d 0a c4 6c 46 7b 28 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 Data Ascii: `Hv9}lF{(rH)Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUF
2024-10-08 19:21:19 UTC	16384	IN	Data Raw: d6 d6 bf a7 c9 82 82 ed 58 a9 a7 1e 3e d1 2c 29 8c 92 ca 92 96 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 Data Ascii: X>,)i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9
2024-10-08 19:21:19 UTC	16384	IN	Data Raw: a4 ca a6 93 a3 67 05 69 b4 c6 7e c4 d9 e3 39 43 68 1e b4 61 d1 c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 Data Ascii: gi~9Chajuh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7
2024-10-08 19:21:19 UTC	16384	IN	Data Raw: 41 1f ce 63 f8 7c 38 cb 6e 62 8c 3e 56 eb 18 50 d0 d5 39 aa fa b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 Data Ascii: Ac\|8nb>VP9^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{
2024-10-08 19:21:19 UTC	16384	IN	Data Raw: 6f 8f 8c 3d a0 b1 ba b9 56 ed db 8d 94 af 1a 74 72 fb 31 53 f0 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 Data Ascii: o=Vtr1SojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$s
2024-10-08 19:21:19 UTC	16384	IN	Data Raw: 28 6a 74 56 53 66 c5 fe cf 72 5c d8 9f 15 29 63 4d 91 32 d6 52 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc Data Ascii: (jtVSfr\)cM2R6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3
2024-10-08 19:21:19 UTC	2490	IN	Data Raw: 76 68 98 bc a0 3f 40 4a 03 1c b3 42 1d 27 14 de 2c 30 3f 34 26 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f Data Ascii: vh?@JB',0?4&x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49755	52.98.243.34	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	936	OUT	GET /owa/prefetch.aspx HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ClientId=B318D9A06B544A718D95CEA76353EAC8; OIDC=1; OpenIdConnect.nonce.v3.0tgEVfSKyAdfNUVh5YjvzF0kH6wQrbxmxjAi0wgU8Gw=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12; X-OWA-RedirectHistory=ArLym14B7KywXs7n3Ag
2024-10-08 19:21:20 UTC	1586	IN	HTTP/1.1 200 OK Cache-Control: private, no-store Content-Length: 2745 Content-Type: text/html; charset=utf-8 Server: Microsoft-IIS/10.0 request-id: 6b97cc8d-645b-0ec0-7b22-9240b162b3a4 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedFETarget: FR4P281CU026.internal.outlook.com X-BackEndHttpStatus: 200 Set-Cookie: OWAPF=v:15.20.8026.24&l:mouse; path=/; secure; HttpOnly X-CalculatedBETarget: FRYP281MB3068.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS7 X-OWA-Version: 15.20.8026.23 X-OWA-DiagnosticsInfo: 5;0;0; X-BackEnd-Begin: 2024-10-08T19:21:20.161 X-BackEnd-End: 2024-10-08T19:21:20.161 X-DiagInfo: FRYP281MB3068 X-BEServer: FRYP281MB3068 X-UA-Compatible: IE=EmulateIE7 X-ResponseOrigin: OwaAppPool X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 200 X-FEProxyInfo: FR0P281CA0173.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-FEServer: FR4P281CA0381 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=HHN&RemoteIP=8.46.123.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: HHN X-FEServer: FR0P281CA0173 Date: Tue, 08 Oct 2024 19:21:19 GMT Connection: close
2024-10-08 19:21:20 UTC	2745	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 65 66 65 74 63 68 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f Data Ascii: <!DOCTYPE html><html><head> <title>Prefetch</title> <meta http-equiv="x-ua-compatible" content="IE=Edge"> <style> @font-face { font-family: 'office365icons'; src: url('https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49760	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 15730158-a01e-0002-489a-195074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192120Z-1657d5bbd48gjrh9ymem1nvr1n00000000pg000000012fhy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49756	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 4d800123-401e-00ac-3bf9-180a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192120Z-1657d5bbd48q6t9vvmrkd293mg00000005ag00000000s6pa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:20 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49757	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192120Z-1657d5bbd48sdh4cyzadbb374800000005a0000000006w16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49759	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192120Z-1657d5bbd48762wn1qw4s5sd3000000005a000000000ah8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49758	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192120Z-1657d5bbd482lxwq1dp2t1zwkc000000056g000000009aac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49761	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	433	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:20 UTC	792	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 79f19b76-201e-004b-80d6-1648ba000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192120Z-1657d5bbd48dfrdj7px744zp8s000000055g00000000dmtu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:20 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-08 19:21:21 UTC	16384	IN	Data Raw: 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 ae d0 47 c2 99 47 5b 6a a1 db c9 ce 2d d0 71 08 5a 64 11 58 a4 Data Ascii: Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUFGG[j-qZdX
2024-10-08 19:21:21 UTC	16384	IN	Data Raw: 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 5e a0 b7 cf f0 f1 eb 15 f7 97 49 1a 67 29 5a 32 4a cf 61 c8 54 Data Ascii: i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9^Ig)Z2JaT
2024-10-08 19:21:21 UTC	16384	IN	Data Raw: c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 22 bf 58 45 07 fb 68 b5 36 b5 cb 52 b6 2d b7 eb c7 d3 70 f8 10 Data Ascii: juh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7"XEh6R-p
2024-10-08 19:21:21 UTC	16384	IN	Data Raw: b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 02 d4 b7 02 3a c1 61 cd 3d bd 16 ca 31 da 5e 8c 95 df 45 cb 01 Data Ascii: ^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{:a=1^E
2024-10-08 19:21:21 UTC	16384	IN	Data Raw: 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 b4 02 92 4b d5 b1 75 17 96 0e b3 72 50 0e 90 16 c6 12 14 96 41 Data Ascii: ojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$sKurPA
2024-10-08 19:21:21 UTC	16384	IN	Data Raw: 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc 62 0c f8 da ff d2 10 b6 5d 8b f8 dd ff 09 a0 f2 fc 73 ab 3f de Data Ascii: 6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3 b]s?
2024-10-08 19:21:21 UTC	2469	IN	Data Raw: 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f e7 bf 94 24 d3 33 bf ed be 46 3e eb 7b 14 3a 2b 1d a6 4f fa be Data Ascii: x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC$3F>{:+O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49762	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	649	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:20 UTC	738	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: ad567bd4-201e-0022-48bf-1639e4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192120Z-1657d5bbd48sdh4cyzadbb3748000000058000000000fb0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:20 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-08 19:21:20 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49763	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:20 UTC	778	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: bb555e3e-f01e-006c-4bf3-16176c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192120Z-1657d5bbd48tqvfc1ysmtbdrg0000000059000000000f7yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:20 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49764	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	672	OUT	GET /shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:21 UTC	735	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:21 GMT Content-Type: image/jpeg Content-Length: 987 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:42 GMT ETag: 0x8DB5C3F457E15E1 x-ms-request-id: 1cfac162-601e-001f-80b7-197052000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192120Z-1657d5bbd48gqrfwecymhhbfm8000000049g000000006uv4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9CC

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192120Z-1657d5bbd48sdh4cyzadbb3748000000056000000000st32 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:20 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49769	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 84b1bfab-701e-0032-2559-19a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192120Z-1657d5bbd48xjgsr3pyv9u71rc00000001a000000000wtby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:20 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192120Z-1657d5bbd48dfrdj7px744zp8s00000005700000000076su x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49765	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	666	OUT	GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:21 UTC	737	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:21 GMT Content-Type: image/jpeg Content-Length: 17453 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:42 GMT ETag: 0x8DB5C3F4584F323 x-ms-request-id: 91374918-a01e-002c-64b7-191054000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192120Z-1657d5bbd48dfrdj7px744zp8s000000051g00000000zuzz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	15647	IN	Data Raw: ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e Data Ascii: Phttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syn
2024-10-08 19:21:21 UTC	1806	IN	Data Raw: 00 04 00 00 05 00 45 00 00 05 00 00 01 00 05 50 00 00 04 00 00 05 1f ff d3 db c0 6d cd 05 45 00 00 00 04 50 1c 8a 02 00 00 00 00 04 48 aa 0e 45 15 10 00 00 00 00 00 04 82 80 90 50 10 00 04 01 44 14 51 14 10 51 11 05 01 05 40 00 00 00 00 15 40 00 00 00 40 54 50 42 28 00 00 00 00 00 00 00 02 80 00 00 00 20 00 02 a2 8a 00 00 00 00 0a 02 00 00 00 02 28 00 8a 80 00 a0 02 0a 08 a8 28 08 a0 00 02 80 a8 22 80 88 a0 2a 28 00 02 00 28 20 a2 08 28 08 00 02 88 00 0a 82 80 8a 00 00 8a 00 00 08 00 00 02 00 00 00 0a 00 a8 a8 a0 82 a2 00 00 00 8a 00 a0 02 00 02 80 20 00 00 00 00 80 00 00 22 a0 a0 20 00 2a 2a 00 02 8a 80 8a 20 82 88 00 00 00 0a 00 a0 00 00 08 02 a8 8a 02 00 28 00 80 02 80 02 00 00 02 82 2a 28 00 02 80 00 00 8a 00 02 80 00 00 20 02 80 00 ff d4 db c5 46 dc Data Ascii: EPmEPHEPDQQ@@@TPB( (("(( ( " * (*( F

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49767	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192120Z-1657d5bbd48xsz2nuzq4vfrzg800000005b0000000005p58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.6	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192120Z-1657d5bbd48762wn1qw4s5sd30000000059000000000fbp7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49771	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:20 UTC	660	OUT	GET /shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:21 UTC	762	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:20 GMT Content-Type: image/png Content-Length: 5139 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:45 GMT ETag: 0x8DB5C3F475BAFC0 x-ms-request-id: 4ee5043b-701e-0072-26b7-19fbb4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192120Z-1657d5bbd48sdh4cyzadbb374800000005bg000000000zrb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	5139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 00 48 08 06 00 00 00 ad 04 dd dc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNGIHDRVHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49766	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:21 UTC	663	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:21 UTC	779	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:21 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 282afdf8-101e-0032-7cd3-16b49e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192121Z-1657d5bbd48jwrqbupe3ktsx9w00000005r0000000000729 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49776	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:21 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:21 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:21 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: bb555e3e-f01e-006c-4bf3-16176c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192121Z-1657d5bbd482lxwq1dp2t1zwkc000000056000000000bw6p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49775	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:21 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:21 UTC	812	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:21 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: 84e8f736-c01e-0031-5bf0-1655fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192121Z-1657d5bbd48762wn1qw4s5sd30000000057000000000tz83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-08 19:21:21 UTC	16384	IN	Data Raw: 19 bb cd 17 f0 ef de f3 f6 f9 b2 b5 d7 7c 4e 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c Data Ascii: \|N6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x
2024-10-08 19:21:21 UTC	3212	IN	Data Raw: 38 5d 1d 96 55 52 b0 ee 65 51 a5 80 82 a6 5f a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 Data Ascii: 8]UReQ_-av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49777	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:21 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:21 UTC	738	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:21 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: ad567bd4-201e-0022-48bf-1639e4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192121Z-1657d5bbd48t66tjar5xuq22r800000005d000000000d275 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-08 19:21:21 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:21 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 3c22684b-b01e-0084-63e7-18d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192121Z-1657d5bbd48wd55zet5pcra0cg00000005cg00000000dxpw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49780	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:21 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4fb39678-001e-00a2-6f82-19d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192121Z-1657d5bbd48gjrh9ymem1nvr1n00000000w00000000059fz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:21 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192121Z-1657d5bbd48xsz2nuzq4vfrzg8000000059000000000fe0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:21 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192121Z-1657d5bbd4824mj9d6vp65b6n400000005r0000000000cb6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:21 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:21 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192121Z-1657d5bbd48cpbzgkvtewk0wu000000005m0000000001y8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49783	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:21 UTC	415	OUT	GET /shared/1.0/content/images/applogos/53_7a3c80bf9694448bac31a9589d2e9e92.png HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:21 UTC	734	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:21 GMT Content-Type: image/png Content-Length: 5139 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:45 GMT ETag: 0x8DB5C3F475BAFC0 x-ms-request-id: 4ee5043b-701e-0072-26b7-19fbb4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192121Z-1657d5bbd48sdh4cyzadbb3748000000057000000000nw5y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	5139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 56 00 00 00 48 08 06 00 00 00 ad 04 dd dc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 Data Ascii: PNGIHDRVHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49784	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:21 UTC	421	OUT	GET /shared/1.0/content/images/appbackgrounds/49_6ffe0a92d779c878835b40171ffc2e13.jpg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:21 UTC	757	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:21 GMT Content-Type: image/jpeg Content-Length: 17453 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:42 GMT ETag: 0x8DB5C3F4584F323 x-ms-request-id: 91374918-a01e-002c-64b7-191054000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192121Z-1657d5bbd482lxwq1dp2t1zwkc000000056g000000009ae3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-08 19:21:21 UTC	15627	IN	Data Raw: ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e Data Ascii: Phttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syn
2024-10-08 19:21:21 UTC	1826	IN	Data Raw: 04 11 40 00 01 00 14 01 40 00 00 10 01 40 14 40 00 00 50 00 00 04 00 00 05 00 45 00 00 05 00 00 01 00 05 50 00 00 04 00 00 05 1f ff d3 db c0 6d cd 05 45 00 00 00 04 50 1c 8a 02 00 00 00 00 04 48 aa 0e 45 15 10 00 00 00 00 00 04 82 80 90 50 10 00 04 01 44 14 51 14 10 51 11 05 01 05 40 00 00 00 00 15 40 00 00 00 40 54 50 42 28 00 00 00 00 00 00 00 02 80 00 00 00 20 00 02 a2 8a 00 00 00 00 0a 02 00 00 00 02 28 00 8a 80 00 a0 02 0a 08 a8 28 08 a0 00 02 80 a8 22 80 88 a0 2a 28 00 02 00 28 20 a2 08 28 08 00 02 88 00 0a 82 80 8a 00 00 8a 00 00 08 00 00 02 00 00 00 0a 00 a8 a8 a0 82 a2 00 00 00 8a 00 a0 02 00 02 80 20 00 00 00 00 80 00 00 22 a0 a0 20 00 2a 2a 00 02 8a 80 8a 20 82 88 00 00 00 0a 00 a0 00 00 08 02 a8 8a 02 00 28 00 80 02 80 02 00 00 02 82 2a 28 00 Data Ascii: @@@@PEPmEPHEPDQQ@@@TPB( (("(( ( " * (*(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49785	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:21 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:22 UTC	800	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:22 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 282afdf8-101e-0032-7cd3-16b49e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192122Z-1657d5bbd48xlwdx82gahegw4000000005hg00000000ud8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-08 19:21:22 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49786	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:21 UTC	427	OUT	GET /shared/1.0/content/images/appbackgrounds/49-small_2055002f2daae2ed8f69f03944c0e5d9.jpg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:22 UTC	755	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:22 GMT Content-Type: image/jpeg Content-Length: 987 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:42 GMT ETag: 0x8DB5C3F457E15E1 x-ms-request-id: 1cfac162-601e-001f-80b7-197052000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192122Z-1657d5bbd48tnj6wmberkg2xy800000005bg000000015532 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-08 19:21:22 UTC	987	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 66 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 10 00 00 00 4e 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 32 2e 39 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: JFIFHHfExifMM*>F(1NHHpaint.net 4.2.9CC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49788	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:22 UTC	439	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:22 UTC	791	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:22 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: 84e8f736-c01e-0031-5bf0-1655fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192122Z-1657d5bbd48vhs7r2p1ky7cs5w00000005qg00000000ka9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:22 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-08 19:21:22 UTC	16384	IN	Data Raw: 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c cb 13 7e 4b 7f b3 f5 a0 bd 18 b0 9c 02 ae 84 ce 0c ce 0e 98 ef Data Ascii: }L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x~K
2024-10-08 19:21:22 UTC	3191	IN	Data Raw: 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 23 de 14 2a 36 0a d3 69 66 72 2e 59 04 99 e6 f2 d3 c0 28 c8 74 Data Ascii: -av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x#*6ifr.Y(t

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49791	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:22 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192122Z-1657d5bbd48gqrfwecymhhbfm800000004ag000000002tc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:22 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192122Z-1657d5bbd48tqvfc1ysmtbdrg0000000055g00000000z5gc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:22 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:22 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: a4cde42a-401e-00a3-1f9c-198b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192122Z-1657d5bbd48q6t9vvmrkd293mg000000058g000000012148 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:22 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:22 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:22 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 688d2aae-a01e-0084-3466-179ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192122Z-1657d5bbd48762wn1qw4s5sd30000000055g000000012ekc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:22 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:22 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192122Z-1657d5bbd482lxwq1dp2t1zwkc000000057g0000000051hm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49797	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:23 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:23 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192123Z-1657d5bbd48t66tjar5xuq22r8000000058g000000012sz4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49796	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:23 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192123Z-1657d5bbd48tqvfc1ysmtbdrg000000005bg000000003g3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49799	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:23 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:23 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192123Z-1657d5bbd48t66tjar5xuq22r800000005bg00000000mwxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:23 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49798	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:23 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:23 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 92e59db7-001e-002b-6700-1799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192123Z-1657d5bbd48brl8we3nu8cxwgn00000005m00000000133yf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:23 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:23 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:23 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:23 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 10df1352-f01e-00aa-105a-178521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192123Z-1657d5bbd48sqtlf1huhzuwq70000000054g00000000g0tt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:23 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49800	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:24 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:24 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:24 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192124Z-1657d5bbd48qjg85buwfdynm5w00000005hg0000000092hw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:24 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49801	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:24 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:24 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:24 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192124Z-1657d5bbd48xdq5dkwwugdpzr000000005n00000000112zg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:24 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:24 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:24 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:24 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 53f69819-801e-0048-7802-17f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192124Z-1657d5bbd48vlsxxpe15ac3q7n00000005a000000000ukxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:24 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:24 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:24 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:24 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1be548a6-001e-00a2-4166-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192124Z-1657d5bbd48sqtlf1huhzuwq70000000050g000000013420 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:24 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:24 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:24 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192124Z-1657d5bbd48xdq5dkwwugdpzr000000005q000000000r6f4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:26 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:26 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 678daa67-201e-00aa-3f60-173928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192126Z-1657d5bbd48sqtlf1huhzuwq700000000570000000004nhx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:26 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:26 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:26 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192126Z-1657d5bbd48gqrfwecymhhbfm8000000044g00000000xpm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:26 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:26 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192126Z-1657d5bbd48t66tjar5xuq22r800000005b000000000quf8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:26 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:26 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:26 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5a5a1e5c-a01e-001e-18f5-1649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192126Z-1657d5bbd482tlqpvyz9e93p5400000005h000000000ag50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:26 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:26 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:26 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:26 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192126Z-1657d5bbd48wd55zet5pcra0cg000000059g00000000wsv3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:26 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:27 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:27 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192127Z-1657d5bbd48jwrqbupe3ktsx9w00000005fg000000015901 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:27 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:27 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:27 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192127Z-1657d5bbd48brl8we3nu8cxwgn00000005sg000000009syg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:27 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:27 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 04801829-801e-00ac-6301-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192127Z-1657d5bbd48xdq5dkwwugdpzr000000005p000000000vnrh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:27 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:27 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192127Z-1657d5bbd48tnj6wmberkg2xy800000005k0000000005wxh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:27 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:27 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192127Z-1657d5bbd48brl8we3nu8cxwgn00000005ng00000000x171 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:28 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192128Z-1657d5bbd48762wn1qw4s5sd30000000058g00000000k7cc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:28 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192128Z-1657d5bbd48xsz2nuzq4vfrzg8000000059g00000000dhyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:28 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:28 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 46a5aa72-701e-0032-6004-17a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192128Z-1657d5bbd48tnj6wmberkg2xy800000005hg000000007spr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:28 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192128Z-1657d5bbd48xlwdx82gahegw4000000005g0000000011eu0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:28 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:28 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192128Z-1657d5bbd482tlqpvyz9e93p5400000005g000000000dwhv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:28 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192128Z-1657d5bbd48tqvfc1ysmtbdrg0000000059000000000f8he x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:29 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:28 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192128Z-1657d5bbd48t66tjar5xuq22r800000005d000000000d2my x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:29 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:28 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 963c402d-c01e-00ad-09ed-18a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192128Z-1657d5bbd482krtfgrg72dfbtn0000000510000000010f9g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:28 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192128Z-1657d5bbd48wd55zet5pcra0cg000000058g000000010v5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:29 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:29 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:29 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192129Z-1657d5bbd482tlqpvyz9e93p5400000005eg00000000px1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:29 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:29 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:29 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192129Z-1657d5bbd48xdq5dkwwugdpzr000000005qg00000000nrmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:29 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:29 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:29 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192129Z-1657d5bbd48gqrfwecymhhbfm8000000046000000000q69f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:29 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:29 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192129Z-1657d5bbd48xlwdx82gahegw4000000005k000000000rq9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:29 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:29 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:29 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192129Z-1657d5bbd482krtfgrg72dfbtn000000051g00000000zqyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:29 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:30 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:30 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192130Z-1657d5bbd48xlwdx82gahegw4000000005m000000000kvr8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:30 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:30 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192130Z-1657d5bbd48wd55zet5pcra0cg00000005b000000000nu1w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:30 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:30 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 897bc565-f01e-0096-5e60-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192130Z-1657d5bbd48tqvfc1ysmtbdrg000000005ag000000007tt6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:30 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:30 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:30 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192130Z-1657d5bbd48brl8we3nu8cxwgn00000005t0000000006yab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:30 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:30 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192130Z-1657d5bbd48xdq5dkwwugdpzr000000005tg0000000052s1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:30 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:30 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192130Z-1657d5bbd48lknvp09v995n79000000004x0000000013t7c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:30 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:31 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:31 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 00f4a93e-f01e-003f-4bb2-19d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192131Z-1657d5bbd48762wn1qw4s5sd300000000550000000013mr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-08 19:21:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:31 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: f196d52c-b01e-0002-1604-171b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192131Z-1657d5bbd48xlwdx82gahegw4000000005k000000000rqcq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49848	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:31 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_54b287bb6b3cdb3a7698.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:31 UTC	791	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:31 GMT Content-Type: application/x-javascript Content-Length: 1665 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD531796426D x-ms-request-id: e621e2af-601e-004a-14b7-191766000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192131Z-1657d5bbd48dfrdj7px744zp8s000000053000000000urxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-08 19:21:31 UTC	1665	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e5 57 5b 6f db 36 14 7e ef af 60 b4 87 d8 8d 24 df e2 4b dc 7a 40 9b a4 4b ba a6 31 62 af c3 10 07 06 25 d1 36 13 89 14 48 ca 8e 97 f8 bf ef 90 96 6c cb 71 ba b4 c5 80 0d 0b 10 cb 26 cf e5 3b 97 ef 90 2a bd de 7b 85 5e 23 e7 e5 7f a8 d7 7f 77 d5 47 97 1f 50 ff ec fc ea 04 75 e1 d7 1f e8 f3 65 ff fc f8 f4 e5 76 b4 53 fd df 9f 50 89 46 34 24 08 9e 1e 96 24 40 9c 21 2e 10 65 3e 17 31 17 58 11 89 22 f8 14 14 87 68 24 78 84 d4 84 a0 58 f0 5b e2 2b 89 42 2a 15 28 79 24 e4 33 54 00 73 22 40 5d 2c d4 1c 9d 77 8b 2e d8 27 60 8d 8e 29 03 6d 9f c7 73 f8 3e 51 88 71 45 7d 82 30 0b 8c b5 10 7e 30 49 50 c2 02 22 d0 6c 42 fd 09 ba a0 be e0 92 8f 14 12 c4 27 74 0a 4e 64 02 eb 79 17 36 c2 82 20 49 14 1a 71 a1 26 4b 1c 2e ea 69 c9 d4 aa 34 6e Data Ascii: W[o6~`$Kz@K1b%6Hlq&;{^#wGPuevSPF4$$@!.e>1X"h$xX[+B(y$3Ts"@],w.'`)ms>QqE}0~0IP"lB'tNdy6 Iq&K.i4n

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:31 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:31 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb96d6a-f01e-003f-17e5-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192131Z-1657d5bbd487nf59mzf5b3gk8n0000000550000000000e25 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:31 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:31 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192131Z-1657d5bbd48brl8we3nu8cxwgn00000005tg00000000608u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49847	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:31 UTC	668	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:31 UTC	734	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:31 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: fff8b81d-e01e-0026-36e8-18fcf1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192131Z-1657d5bbd48lknvp09v995n790000000053g000000006enf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:31 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49849	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:31 UTC	662	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:31 UTC	734	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:31 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: a9d77512-001e-0001-5dde-18eb35000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192131Z-1657d5bbd487nf59mzf5b3gk8n0000000550000000000e26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:31 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:31 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:31 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:31 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192131Z-1657d5bbd48qjg85buwfdynm5w00000005g000000000feu9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:31 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:31 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:32 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192132Z-1657d5bbd48t66tjar5xuq22r800000005dg00000000ab8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:32 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:32 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:32 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:32 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192132Z-1657d5bbd48762wn1qw4s5sd30000000058g00000000k7q0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:32 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49859	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:32 UTC	423	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:32 UTC	734	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:32 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: 82c1308e-401e-0072-47ce-16b3a6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192132Z-1657d5bbd482krtfgrg72dfbtn000000056000000000b28p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:32 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49858	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:32 UTC	417	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:32 UTC	734	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:32 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: 0cdd1803-301e-0011-5cc9-16664f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192132Z-1657d5bbd48cpbzgkvtewk0wu000000005hg000000008cwu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:32 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:32 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:32 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:32 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192132Z-1657d5bbd48q6t9vvmrkd293mg00000005900000000107qx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:32 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:32 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:32 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192132Z-1657d5bbd48brl8we3nu8cxwgn00000005p000000000ukyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:32 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49860	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:32 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_54b287bb6b3cdb3a7698.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:32 UTC	811	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:32 GMT Content-Type: application/x-javascript Content-Length: 1665 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD531796426D x-ms-request-id: e621e2af-601e-004a-14b7-191766000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192132Z-1657d5bbd48brl8we3nu8cxwgn00000005rg00000000ds29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-08 19:21:32 UTC	1665	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e5 57 5b 6f db 36 14 7e ef af 60 b4 87 d8 8d 24 df e2 4b dc 7a 40 9b a4 4b ba a6 31 62 af c3 10 07 06 25 d1 36 13 89 14 48 ca 8e 97 f8 bf ef 90 96 6c cb 71 ba b4 c5 80 0d 0b 10 cb 26 cf e5 3b 97 ef 90 2a bd de 7b 85 5e 23 e7 e5 7f a8 d7 7f 77 d5 47 97 1f 50 ff ec fc ea 04 75 e1 d7 1f e8 f3 65 ff fc f8 f4 e5 76 b4 53 fd df 9f 50 89 46 34 24 08 9e 1e 96 24 40 9c 21 2e 10 65 3e 17 31 17 58 11 89 22 f8 14 14 87 68 24 78 84 d4 84 a0 58 f0 5b e2 2b 89 42 2a 15 28 79 24 e4 33 54 00 73 22 40 5d 2c d4 1c 9d 77 8b 2e d8 27 60 8d 8e 29 03 6d 9f c7 73 f8 3e 51 88 71 45 7d 82 30 0b 8c b5 10 7e 30 49 50 c2 02 22 d0 6c 42 fd 09 ba a0 be e0 92 8f 14 12 c4 27 74 0a 4e 64 02 eb 79 17 36 c2 82 20 49 14 1a 71 a1 26 4b 1c 2e ea 69 c9 d4 aa 34 6e Data Ascii: W[o6~`$Kz@K1b%6Hlq&;{^#wGPuevSPF4$$@!.e>1X"h$xX[+B(y$3Ts"@],w.'`)ms>QqE}0~0IP"lB'tNdy6 Iq&K.i4n

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:32 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:32 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:32 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192132Z-1657d5bbd48sqtlf1huhzuwq70000000056g000000007833 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:32 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49863	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:32 UTC	667	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:32 UTC	779	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:32 GMT Content-Type: image/svg+xml Content-Length: 628 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4963155C x-ms-request-id: 7a61b347-401e-005d-2bb7-19be6d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192132Z-1657d5bbd48sqtlf1huhzuwq70000000052g00000000tu05 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-08 19:21:32 UTC	628	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 3b 1d 07 0b 36 Data Ascii: mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q;6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49862	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:32 UTC	667	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:33 UTC	779	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:32 GMT Content-Type: image/svg+xml Content-Length: 254 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F496CFFA1 x-ms-request-id: 1bf7d40c-201e-0043-2cb7-19250a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192132Z-1657d5bbd48vhs7r2p1ky7cs5w00000005m0000000014r2u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-08 19:21:33 UTC	254	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b 01 00 00 Data Ascii: mPn DxY0\{ 7yF!TYYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{fTV-#mfV2<~l%4IeTL69vWv3vO}{

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:33 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:33 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:33 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192133Z-1657d5bbd48lknvp09v995n79000000004y000000000z696 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:33 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:33 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:33 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:33 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192133Z-1657d5bbd48xlwdx82gahegw4000000005p0000000008bz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:33 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:33 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:33 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:33 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: c7c7f933-601e-000d-2ea3-192618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192133Z-1657d5bbd48gjrh9ymem1nvr1n00000000t000000000kefu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:33 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:33 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:33 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:33 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: aff86048-e01e-0051-33ff-1884b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192133Z-1657d5bbd48vhs7r2p1ky7cs5w00000005s000000000bh6a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:33 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49868	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:33 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 63 78 37 42 34 38 50 73 51 55 2b 63 75 58 55 2b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 65 64 30 35 39 66 37 33 39 33 38 37 66 64 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: cx7B48PsQU+cuXU+.1Context: fed059f739387fd9
2024-10-08 19:21:33 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-08 19:21:33 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 63 78 37 42 34 38 50 73 51 55 2b 63 75 58 55 2b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 65 64 30 35 39 66 37 33 39 33 38 37 66 64 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 55 45 43 34 76 54 63 4a 41 56 54 6b 4d 33 4a 48 55 31 72 78 56 69 76 5a 56 5a 68 54 59 30 59 36 62 34 31 7a 52 51 42 46 53 41 52 4b 63 66 6b 45 43 72 78 2f 61 41 47 30 6b 34 7a 47 4b 70 4e 47 57 6a 71 4c 6c 4a 36 4c 4b 77 52 71 6f 70 71 75 79 6f 6b 53 70 33 49 32 32 7a 74 78 70 61 41 39 55 66 49 47 66 49 2b 6d 61 4d 48 66 69 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: cx7B48PsQU+cuXU+.2Context: fed059f739387fd9<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAUEC4vTcJAVTkM3JHU1rxVivZVZhTY0Y6b41zRQBFSARKcfkECrx/aAG0k4zGKpNGWjqLlJ6LKwRqopquyokSp3I22ztxpaA9UfIGfI+maMHfi
2024-10-08 19:21:33 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 63 78 37 42 34 38 50 73 51 55 2b 63 75 58 55 2b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 65 64 30 35 39 66 37 33 39 33 38 37 66 64 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: cx7B48PsQU+cuXU+.3Context: fed059f739387fd9<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-08 19:21:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-08 19:21:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 50 79 48 74 35 62 70 44 55 55 43 53 77 6b 59 53 61 46 56 33 57 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: PyHt5bpDUUCSwkYSaFV3WA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:34 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:34 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192134Z-1657d5bbd48t66tjar5xuq22r8000000058g000000012tv6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:34 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49871	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:34 UTC	422	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:34 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:34 GMT Content-Type: image/svg+xml Content-Length: 628 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4963155C x-ms-request-id: 7a61b347-401e-005d-2bb7-19be6d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192134Z-1657d5bbd48dfrdj7px744zp8s000000056000000000c42a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-08 19:21:34 UTC	628	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 3b 1d 07 0b 36 Data Ascii: mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q;6

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:34 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:34 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 05ec8595-701e-000d-7443-196de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192134Z-1657d5bbd48cpbzgkvtewk0wu000000005cg000000010h7n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:34 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:34 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:34 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b6c21a8e-c01e-008e-115a-177381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192134Z-1657d5bbd48762wn1qw4s5sd30000000055g000000012fgp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:34 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:34 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:34 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192134Z-1657d5bbd48sqtlf1huhzuwq70000000051g00000000yfh0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:34 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:34 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:34 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192134Z-1657d5bbd48gqrfwecymhhbfm8000000044000000000yug4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:34 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49872	13.107.246.45	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:34 UTC	422	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-08 19:21:34 UTC	778	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:34 GMT Content-Type: image/svg+xml Content-Length: 254 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F496CFFA1 x-ms-request-id: 1bf7d40c-201e-0043-2cb7-19250a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241008T192134Z-1657d5bbd48vhs7r2p1ky7cs5w00000005t000000000762k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:34 UTC	254	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b 01 00 00 Data Ascii: mPn DxY0\{ 7yF!TYYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{fTV-#mfV2<~l%4IeTL69vWv3vO}{

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:35 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:35 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:35 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192135Z-1657d5bbd482krtfgrg72dfbtn00000005800000000031pk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:35 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:35 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:35 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:35 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 6f1c5b1d-901e-0048-485a-17b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192135Z-1657d5bbd48jwrqbupe3ktsx9w00000005gg000000010t1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:35 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:35 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:36 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:35 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192135Z-1657d5bbd482lxwq1dp2t1zwkc000000053g00000000t65b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:36 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49879	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:35 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:35 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:35 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: a9a45936-c01e-00a1-54f1-167e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192135Z-1657d5bbd482lxwq1dp2t1zwkc0000000510000000014p1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:35 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:35 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:35 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:35 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: beb0cdc4-e01e-003c-7bed-18c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192135Z-1657d5bbd48brl8we3nu8cxwgn00000005sg000000009tm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:35 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:36 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:36 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:36 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192136Z-1657d5bbd48xlwdx82gahegw4000000005fg000000013z5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:36 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49886	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:36 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:36 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:36 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192136Z-1657d5bbd48q6t9vvmrkd293mg00000005cg00000000fddv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:36 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49884	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:36 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:36 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:36 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 6e13ebf9-401e-002a-5249-19c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192136Z-1657d5bbd48xjgsr3pyv9u71rc00000001e0000000009xye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:36 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:36 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:36 UTC	564	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:36 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 48dac480-001e-002b-1ab7-1999f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192136Z-1657d5bbd48762wn1qw4s5sd30000000058000000000nsut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-08 19:21:36 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49885	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:36 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:36 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:36 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192136Z-1657d5bbd4824mj9d6vp65b6n400000005p0000000009gac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:36 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:37 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:37 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:37 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192137Z-1657d5bbd48q6t9vvmrkd293mg000000058000000001463e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:37 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49891	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:37 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:37 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:37 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192137Z-1657d5bbd48tqvfc1ysmtbdrg0000000058g00000000hf56 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:37 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:37 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:37 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:37 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fbb49b00-e01e-00aa-4806-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192137Z-1657d5bbd48brl8we3nu8cxwgn00000005r000000000gtv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:37 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49892	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:37 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:37 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:37 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d21ea5d-701e-0098-0502-17395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192137Z-1657d5bbd48xdq5dkwwugdpzr000000005mg00000001336p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:37 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49893	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:37 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:37 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:37 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b6fa471e-401e-0067-43e5-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192137Z-1657d5bbd48tqvfc1ysmtbdrg000000005ag000000007u95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:37 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49716	52.97.135.98	443	712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:38 UTC	874	OUT	GET /owa/ HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ClientId=B318D9A06B544A718D95CEA76353EAC8; OIDC=1; OpenIdConnect.nonce.v3.0tgEVfSKyAdfNUVh5YjvzF0kH6wQrbxmxjAi0wgU8Gw=638640120717527706.4c3a699b-998b-4bd9-a2cc-7fd7ed5cae12; X-OWA-RedirectHistory=ArLym14B7KywXs7n3Ag
2024-10-08 19:21:38 UTC	6430	IN	HTTP/1.1 302 Content-Length: 786 Content-Type: text/html; charset=utf-8 Location: https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&resource=00000002-0000-0ff1-ce00-000000000000&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=1&msaredir=1&client-request-id=bc3da322-4727-861b-5eb4-b16d3af9813b&protectedtoken=true&claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d&nonce=638640120984531044.ad8bde88-aa8b-46ae-826c-e1703c48a0ff&state=Dcs7FoAgDAXRoMflRALE8FxO-Nhaun0p7nQTiGhftiXIClUrMJWU5YZeJYnq6QNtTIDd0VjNJyNb55mqlK5weZ6w3iO-n8cf Server: Microsoft-IIS/10.0 request-id: bc3da322-4727-861b-5eb4-b16d3af9813b Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedFETarget: FR2P281CU007.internal.outlook.com X-BackEndHttpStatus: 302 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: RoutingKeyCookie=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.uoM44bqdQIg2juQ339eEZW2fzhEUn6O1HhzxVE5Udx0=638640120984531044.ad8bde88-aa8b-46ae-826c-e1703c48a0ff; expires=Tue, 08-Oct-2024 20:21:38 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: RoutingKeyCookie=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.token.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.id_token.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.code.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_nonce.v1=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.idp_correlation_id=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.tokenPostPath=; domain=outlook.office365.com; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OpenIdConnect.nonce.v3.uoM44bqdQIg2juQ339eEZW2fzhEUn6O1HhzxVE5Udx0=638640120984531044.ad8bde88-aa8b-46ae-826c-e1703c48a0ff; expires=Tue, 08-Oct-2024 20:21:38 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: SuiteServiceProxyKey=; expires=Sat, 08-Oct-1994 19:21:38 GMT; path=/; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=ArLym14BZHCYbs7n3Ag\|ArLym14B7KywXs7n3Ag; expires=Wed, 09-Oct-2024 01:23:38 GMT; path=/;SameSite=None; secure; HttpOnly X-CalculatedBETarget: FRYP281MB0078.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS6 X-OWA-DiagnosticsInfo: 5;0;0; X-BackEnd-Begin: 2024-10-08T19:21:38.437 X-BackEnd-End: 2024-10-08T19:21:38.453 X-DiagInfo: FRYP281MB0078 X-BEServer: FRYP281MB0078 X-UA-Compatible: IE=EmulateIE7 X-ResponseOrigin: OwaAppPool X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 302 X-FEProxyInfo: FR3P281CA0073.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-FEServer: FR2P281CA0102 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=HHN&RemoteIP=8.46.123.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-FirstHopCafeEFZ: HHN X-FEServer: FR3P281CA0073 Date: Tue, 08 Oct 2024 19:21:37 GMT Connection: close
2024-10-08 19:21:38 UTC	786	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 30 30 30 30 30 30 30 32 2d 30 30 30 30 2d 30 66 66 31 2d 63 65 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 25 32 66 6f 77 61 25 32 66 26 61 6d 70 3b 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com/common/oauth2/authorize?client_id=00000002-0000-0ff1-ce00-000000000000&redirect_uri=https%3a%2f%2foutlook.office365.com%2fowa%2f&r

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49896	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:38 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:38 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:38 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: b82dfbee-301e-0052-7600-1965d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192138Z-1657d5bbd48vhs7r2p1ky7cs5w00000005rg00000000drsw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:38 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49894	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-08 19:21:38 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-08 19:21:38 UTC	563	IN	HTTP/1.1 200 OK Date: Tue, 08 Oct 2024 19:21:38 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a18d9b1d-601e-0002-1f03-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241008T192138Z-1657d5bbd48xsz2nuzq4vfrzg800000005c0000000001r1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-08 19:21:38 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4304, Parent PID: 5884

General

Target ID:	0
Start time:	15:21:04
Start date:	08/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 712, Parent PID: 4304

General

Target ID:	2
Start time:	15:21:07
Start date:	08/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2544 --field-trial-handle=2508,i,14472495800388626087,17777241064131445827,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7056, Parent PID: 5884

General

Target ID:	3
Start time:	15:21:10
Start date:	08/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cSN7PR19MB66126F57B7EFCF40B749C3FE847E2%40SN7PR19MB6612.namprd19.prod.outlook.com%3e"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cSN7PR19MB66126F57B7EFCF40B749C3FE847E2%40SN7PR19MB6612.namprd19.prod.outlook.com%3e

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 75

Windows Analysis Report
https://outlook.office365.com/owa/?viewmodel=ReadMessageItem&InternetMessageID=%3cSN7PR19MB66126F57B7EFCF40B749C3FE847E2%40SN7PR19MB6612.namprd19.prod.outlook.com%3e