Edit tour

Windows Analysis Report
https://www.videolan.org/vlc/download-windows.html

Overview

General Information

Sample URL:	https://www.videolan.org/vlc/download-windows.html
Analysis ID:	1530826
Infos:

Detection

Score:	7
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

Drops PE files

Drops PE files to the windows directory (C:\Windows)

PE file contains more sections than normal

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Usage Of Web Request Commands And Cmdlets

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Classification

Process Tree

System is w10x64

cmd.exe (PID: 5308 cmdline: C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://www.videolan.org/vlc/download-windows.html" > cmdline.out 2>&1 MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 6844 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

wget.exe (PID: 2828 cmdline: wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://www.videolan.org/vlc/download-windows.html" MD5: 3DADB6E2ECE9C4B3E1E322E617658B60)

chrome.exe (PID: 3380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\download\download-windows.html MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1760,i,8591697756766500833,3544110521577231241,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Sigma Signatures

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://www.videolan.org/vlc/download-windows.html" > cmdline.out 2>&1, CommandLine: C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://www.videolan.org/vlc/download-windows.html" > cmdline.out 2>&1, CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\cmd.exe, NewProcessName: C:\Windows\SysWOW64\cmd.exe, OriginalFileName: C:\Windows\SysWOW64\cmd.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 5524, ProcessCommandLine: C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://www.videolan.org/vlc/download-windows.html" > cmdline.out 2>&1, ProcessId: 5308, ProcessName: cmd.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: file:///C:/Users/user/Desktop/download/download-windows.html

HTTP Parser: sponsor@videolan.org

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49741 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 213.36.253.2:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.206:443 -> 192.168.2.5:60714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:60721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:60733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:60742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:60754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:60792 version: TLS 1.2

Source:

Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.4.dr

Source: global traffic	TCP traffic: 192.168.2.5:58120 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:60710 -> 162.159.36.2:53

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49741 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 95.100.63.156
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: GET /vlc/download-windows.html HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like GeckoAccept: /Accept-Encoding: identityHost: www.videolan.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=laD8R5yl11nkwe4&MD=3dSVP44a HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /clientwebservice/ping HTTP/1.1Connection: Keep-AliveUser-Agent: DNS resiliency checker/1.0Host: fe3cr.delivery.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sls/ping HTTP/1.1Connection: Keep-AliveUser-Agent: DNS resiliency checker/1.0Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=laD8R5yl11nkwe4&MD=3dSVP44a HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=laD8R5yl11nkwe4&MD=3dSVP44a HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	String found in binary or memory: <a class="social" href="https://www.facebook.com/vlc.media.player"> equals www.facebook.com (Facebook)
Source: wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	String found in binary or memory: <a class="social" href="https://www.twitter.com/videolan"> equals www.twitter.com (Twitter)
Source: chromecache_146.6.dr, chromecache_151.6.dr, chromecache_143.6.dr, chromecache_149.6.dr	String found in binary or memory: return b}QC.F="internal.enableAutoEventOnTimer";var gc=ka(["data-gtm-yt-inspected-"]),SC=["www.youtube.com","www.youtube-nocookie.com"],TC,UC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.videolan.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 206.23.85.13.in-addr.arpa

Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042258109.0000000000FE0000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	String found in binary or memory: http://cuberto.com/
Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	String found in binary or memory: http://sourceforge.net/projects/kernelex/
Source: Google.Widevine.CDM.dll.4.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: sets.json.4.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.4.dr	String found in binary or memory: https://24.hu
Source: sets.json.4.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.4.dr	String found in binary or memory: https://abczdrowie.pl
Source: wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	String found in binary or memory: https://addons.videolan.org/browse/cat/323/ord/latest/
Source: chromecache_149.6.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: sets.json.4.dr	String found in binary or memory: https://alice.tw
Source: sets.json.4.dr	String found in binary or memory: https://ambitionbox.com
Source: chromecache_150.6.dr, chromecache_148.6.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: download-windows.html.2.dr	String found in binary or memory: https://artifacts.videolan.org/vlc/nightly-win64-arm-llvm/
Source: sets.json.4.dr	String found in binary or memory: https://autobild.de
Source: sets.json.4.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.4.dr	String found in binary or memory: https://bild.de
Source: sets.json.4.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.4.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.4.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.4.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.4.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.4.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.4.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.4.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.4.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.4.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.4.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.4.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.4.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.4.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.4.dr	String found in binary or memory: https://cardsayings.net
Source: chromecache_146.6.dr, chromecache_151.6.dr, chromecache_143.6.dr, chromecache_149.6.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: sets.json.4.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.4.dr	String found in binary or memory: https://chennien.com
Source: sets.json.4.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.4.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.4.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.4.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.4.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.4.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.4.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.4.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.4.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.4.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.4.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.4.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.4.dr	String found in binary or memory: https://cookreactor.com
Source: wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042258109.0000000000FE0000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	String found in binary or memory: https://creativecommons.org/licenses/by-sa/3.0/us/
Source: sets.json.4.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.4.dr	String found in binary or memory: https://css-load.com
Source: sets.json.4.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.4.dr	String found in binary or memory: https://deere.com
Source: sets.json.4.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.4.dr	String found in binary or memory: https://dewarmsteweek.be
Source: wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	String found in binary or memory: https://download.videolan.org/pub/videolan/vlc
Source: sets.json.4.dr	String found in binary or memory: https://drimer.io
Source: sets.json.4.dr	String found in binary or memory: https://drimer.travel
Source: sets.json.4.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.4.dr	String found in binary or memory: https://een.be
Source: sets.json.4.dr	String found in binary or memory: https://efront.com
Source: sets.json.4.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.4.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.4.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.4.dr	String found in binary or memory: https://ella.sv
Source: sets.json.4.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.4.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.4.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.4.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.4.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.4.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.4.dr	String found in binary or memory: https://finn.no
Source: sets.json.4.dr	String found in binary or memory: https://firstlook.biz
Source: wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042258109.0000000000FE0000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	String found in binary or memory: https://forum.videolan.org/
Source: sets.json.4.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.4.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.4.dr	String found in binary or memory: https://gettalkdesk.com
Source: sets.json.4.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.4.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.4.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.4.dr	String found in binary or memory: https://grid.id
Source: sets.json.4.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.4.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.4.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.4.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.4.dr	String found in binary or memory: https://hapara.com
Source: sets.json.4.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.4.dr	String found in binary or memory: https://hc1.com
Source: sets.json.4.dr	String found in binary or memory: https://hc1.global
Source: sets.json.4.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.4.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.4.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.4.dr	String found in binary or memory: https://hearty.app
Source: sets.json.4.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.4.dr	String found in binary or memory: https://hearty.me
Source: sets.json.4.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.4.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.4.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.4.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.4.dr	String found in binary or memory: https://hj.rs
Source: sets.json.4.dr	String found in binary or memory: https://hjck.com
Source: sets.json.4.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.4.dr	String found in binary or memory: https://html-load.com
Source: sets.json.4.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.4.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.4.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.4.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.4.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.4.dr	String found in binary or memory: https://img-load.com
Source: sets.json.4.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.4.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.4.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.4.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.4.dr	String found in binary or memory: https://interia.pl
Source: sets.json.4.dr	String found in binary or memory: https://intoday.in
Source: sets.json.4.dr	String found in binary or memory: https://iolam.it
Source: sets.json.4.dr	String found in binary or memory: https://ishares.com
Source: sets.json.4.dr	String found in binary or memory: https://jagran.com
Source: sets.json.4.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.4.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.4.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.4.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.4.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.4.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.4.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.4.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.4.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.4.dr	String found in binary or memory: https://kompas.com
Source: sets.json.4.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.4.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.4.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.4.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.4.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.4.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.4.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.4.dr	String found in binary or memory: https://libero.it
Source: sets.json.4.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.4.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.4.dr	String found in binary or memory: https://livechat.com
Source: sets.json.4.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.4.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.4.dr	String found in binary or memory: https://livemint.com
Source: sets.json.4.dr	String found in binary or memory: https://max.auto
Source: sets.json.4.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.4.dr	String found in binary or memory: https://meo.pt
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.4.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.4.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.4.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.4.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.4.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.4.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.4.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.4.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.4.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.4.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.4.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.4.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.4.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.4.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.4.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.4.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.4.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.4.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.4.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.4.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.4.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.4.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.4.dr	String found in binary or memory: https://money.pl
Source: sets.json.4.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.4.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.4.dr	String found in binary or memory: https://nacion.com
Source: sets.json.4.dr	String found in binary or memory: https://naukri.com
Source: sets.json.4.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.4.dr	String found in binary or memory: https://nien.co
Source: sets.json.4.dr	String found in binary or memory: https://nien.com
Source: sets.json.4.dr	String found in binary or memory: https://nien.org
Source: sets.json.4.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.4.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.4.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.4.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.4.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.4.dr	String found in binary or memory: https://o2.pl
Source: sets.json.4.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.4.dr	String found in binary or memory: https://onet.pl
Source: download-windows.html.2.dr	String found in binary or memory: https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js
Source: download-windows.html.2.dr	String found in binary or memory: https://oss.maxcdn.com/respond/1.4.2/respond.min.js
Source: sets.json.4.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.4.dr	String found in binary or memory: https://p106.net
Source: sets.json.4.dr	String found in binary or memory: https://p24.hu
Source: chromecache_149.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_146.6.dr, chromecache_151.6.dr, chromecache_143.6.dr, chromecache_149.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: sets.json.4.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.4.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.4.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.4.dr	String found in binary or memory: https://player.pl
Source: sets.json.4.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.4.dr	String found in binary or memory: https://poalim.site
Source: sets.json.4.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.4.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.4.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.4.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.4.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.4.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.4.dr	String found in binary or memory: https://radio1.be
Source: sets.json.4.dr	String found in binary or memory: https://radio2.be
Source: sets.json.4.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.4.dr	String found in binary or memory: https://repid.org
Source: sets.json.4.dr	String found in binary or memory: https://reshim.org
Source: sets.json.4.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.4.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.4.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.4.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.4.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.4.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.4.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.4.dr	String found in binary or memory: https://samayam.com
Source: sets.json.4.dr	String found in binary or memory: https://sapo.io
Source: sets.json.4.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.4.dr	String found in binary or memory: https://shock.co
Source: sets.json.4.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.4.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.4.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.4.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.4.dr	String found in binary or memory: https://songshare.com
Source: sets.json.4.dr	String found in binary or memory: https://songstats.com
Source: sets.json.4.dr	String found in binary or memory: https://sporza.be
Source: sets.json.4.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.4.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.4.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.4.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.4.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: chromecache_151.6.dr, chromecache_149.6.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_148.6.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: sets.json.4.dr	String found in binary or memory: https://stripe.com
Source: sets.json.4.dr	String found in binary or memory: https://stripe.network
Source: sets.json.4.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.4.dr	String found in binary or memory: https://supereva.it
Source: chromecache_150.6.dr, chromecache_148.6.dr	String found in binary or memory: https://tagassistant.google.com/
Source: sets.json.4.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.4.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.4.dr	String found in binary or memory: https://talkdeskstgid.com
Source: chromecache_146.6.dr, chromecache_151.6.dr, chromecache_143.6.dr, chromecache_149.6.dr	String found in binary or memory: https://td.doubleclick.net
Source: sets.json.4.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.4.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.4.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.4.dr	String found in binary or memory: https://text.com
Source: sets.json.4.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.4.dr	String found in binary or memory: https://the42.ie
Source: sets.json.4.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.4.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.4.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.4.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.4.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.4.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.4.dr	String found in binary or memory: https://top.pl
Source: sets.json.4.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.4.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.4.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.4.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.4.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.4.dr	String found in binary or memory: https://tvid.in
Source: sets.json.4.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.4.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.4.dr	String found in binary or memory: https://unotv.com
Source: sets.json.4.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.4.dr	String found in binary or memory: https://vrt.be
Source: sets.json.4.dr	String found in binary or memory: https://vwo.com
Source: sets.json.4.dr	String found in binary or memory: https://welt.de
Source: sets.json.4.dr	String found in binary or memory: https://wieistmeineip.de
Source: wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042258109.0000000000FE0000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	String found in binary or memory: https://wiki.videolan.org/
Source: sets.json.4.dr	String found in binary or memory: https://wildix.com
Source: sets.json.4.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.4.dr	String found in binary or memory: https://wingify.com
Source: sets.json.4.dr	String found in binary or memory: https://wordle.at
Source: sets.json.4.dr	String found in binary or memory: https://wp.pl
Source: sets.json.4.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.4.dr	String found in binary or memory: https://www.asadcdn.com
Source: chromecache_146.6.dr, chromecache_143.6.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_150.6.dr, chromecache_148.6.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_150.6.dr, chromecache_148.6.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_150.6.dr, chromecache_148.6.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_149.6.dr	String found in binary or memory: https://www.google.com
Source: chromecache_150.6.dr, chromecache_148.6.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_146.6.dr, chromecache_151.6.dr, chromecache_143.6.dr, chromecache_149.6.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_149.6.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_150.6.dr, chromecache_148.6.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: download-windows.html.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-38853043-1
Source: wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042258109.0000000000FE0000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	String found in binary or memory: https://www.madebyargon.com
Source: chromecache_151.6.dr, chromecache_149.6.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: download-windows.html.2.dr	String found in binary or memory: https://www.paypal.com/cgi-bin/webscr
Source: wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	String found in binary or memory: https://www.twitter.com/videolan
Source: download-windows.html.2.dr	String found in binary or memory: https://www.videolan.org/thank_you.html
Source: wget.exe, 00000002.00000002.2042643405.00000000010F5000.00000004.00000020.00020000.00000000.sdmp, cmdline.out.0.dr	String found in binary or memory: https://www.videolan.org/vlc/download-windows.html
Source: wget.exe, 00000002.00000002.2042643405.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.videolan.org/vlc/download-windows.htmlGON
Source: wget.exe, 00000002.00000002.2042643405.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.videolan.org/vlc/download-windows.htmlPROC
Source: sets.json.4.dr	String found in binary or memory: https://ya.ru
Source: sets.json.4.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.4.dr	String found in binary or memory: https://zalo.me
Source: sets.json.4.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.4.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 60850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60772
Source: unknown	Network traffic detected: HTTP traffic on port 60838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60770
Source: unknown	Network traffic detected: HTTP traffic on port 60815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 60712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60776
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 60849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 60803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60782
Source: unknown	Network traffic detected: HTTP traffic on port 60862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60780
Source: unknown	Network traffic detected: HTTP traffic on port 58122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 60770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 60827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60793
Source: unknown	Network traffic detected: HTTP traffic on port 60861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58122
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58121
Source: unknown	Network traffic detected: HTTP traffic on port 58133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60798
Source: unknown	Network traffic detected: HTTP traffic on port 60771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60797
Source: unknown	Network traffic detected: HTTP traffic on port 58135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58128
Source: unknown	Network traffic detected: HTTP traffic on port 60782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58137
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58131
Source: unknown	Network traffic detected: HTTP traffic on port 60816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58132
Source: unknown	Network traffic detected: HTTP traffic on port 60759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 60793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 60802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 58144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60850
Source: unknown	Network traffic detected: HTTP traffic on port 60863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60856
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60855
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 60851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60746
Source: unknown	Network traffic detected: HTTP traffic on port 60828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60866
Source: unknown	Network traffic detected: HTTP traffic on port 60757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 60736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 60852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 60747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60750
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 60801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 60792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 60713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60768
Source: unknown	Network traffic detected: HTTP traffic on port 58134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60764
Source: unknown	Network traffic detected: HTTP traffic on port 60858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 60847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 60805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 58149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58138
Source: unknown	Network traffic detected: HTTP traffic on port 60745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58148
Source: unknown	Network traffic detected: HTTP traffic on port 60777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58143
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58140
Source: unknown	Network traffic detected: HTTP traffic on port 60754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58149
Source: unknown	Network traffic detected: HTTP traffic on port 60859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58152
Source: unknown	Network traffic detected: HTTP traffic on port 60814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58154
Source: unknown	Network traffic detected: HTTP traffic on port 60711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58150
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60816
Source: unknown	Network traffic detected: HTTP traffic on port 60726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60814
Source: unknown	Network traffic detected: HTTP traffic on port 58131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60813
Source: unknown	Network traffic detected: HTTP traffic on port 58154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60812
Source: unknown	Network traffic detected: HTTP traffic on port 60829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60811
Source: unknown	Network traffic detected: HTTP traffic on port 60750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60810
Source: unknown	Network traffic detected: HTTP traffic on port 60773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60827
Source: unknown	Network traffic detected: HTTP traffic on port 60830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60826
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60820
Source: unknown	Network traffic detected: HTTP traffic on port 60800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60838
Source: unknown	Network traffic detected: HTTP traffic on port 60785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60837
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60836
Source: unknown	Network traffic detected: HTTP traffic on port 60842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60832
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60831
Source: unknown	Network traffic detected: HTTP traffic on port 60737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60830
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60849
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60840
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60844
Source: unknown	Network traffic detected: HTTP traffic on port 60864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60722
Source: unknown	Network traffic detected: HTTP traffic on port 60751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60720

Source: unknown	HTTPS traffic detected: 213.36.253.2:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.206:443 -> 192.168.2.5:60714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:60721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:60733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:60742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:60754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:60792 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\Google.Widevine.CDM.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_3380_1176688420

Jump to behavior

Source: Google.Widevine.CDM.dll.4.dr

Static PE information: Number of sections : 12 > 10

Source: classification engine

Classification label: clean7.win@25/26@5/5

Source: C:\Windows\SysWOW64\cmd.exe

File created: C:\Users\user\Desktop\cmdline.out

Jump to behavior

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6844:120:WilError_03

Source: C:\Windows\SysWOW64\wget.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://www.videolan.org/vlc/download-windows.html" > cmdline.out 2>&1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\wget.exe wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://www.videolan.org/vlc/download-windows.html"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\download\download-windows.html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1760,i,8591697756766500833,3544110521577231241,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\wget.exe wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://www.videolan.org/vlc/download-windows.html"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1760,i,8591697756766500833,3544110521577231241,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\wget.exe	Section loaded: explorerframe.dll	Jump to behavior

Source: C:\Windows\SysWOW64\wget.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{56FDF344-FD6D-11d0-958A-006097C9A090}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:

Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.4.dr

Source: Google.Widevine.CDM.dll.4.dr	Static PE information: section name: .00cfg
Source: Google.Widevine.CDM.dll.4.dr	Static PE information: section name: .gxfg
Source: Google.Widevine.CDM.dll.4.dr	Static PE information: section name: .retplne
Source: Google.Widevine.CDM.dll.4.dr	Static PE information: section name: .voltbl
Source: Google.Widevine.CDM.dll.4.dr	Static PE information: section name: _RDATA

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\Google.Widevine.CDM.dll

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\Google.Widevine.CDM.dll

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: wget.exe, 00000002.00000002.2042477505.0000000000A68000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: unknown

Process created: C:\Windows\SysWOW64\cmd.exe c:\windows\system32\cmd.exe /c wget -t 2 -v -t 60 -p "c:\users\user\desktop\download" --no-check-certificate --content-disposition --user-agent="mozilla/5.0 (windows nt 6.1; wow64; trident/7.0; as; rv:11.0) like gecko" "https://www.videolan.org/vlc/download-windows.html" > cmdline.out 2>&1

Source: C:\Windows\SysWOW64\wget.exe

Queries volume information: C:\Users\user\Desktop\download VolumeInformation

Jump to behavior

Source: C:\Windows\SysWOW64\wget.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Command and Scripting Interpreter	1 DLL Side-Loading	1 Process Injection	21 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	1 Process Injection	LSASS Memory	12 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\Google.Widevine.CDM.dll	0%	ReversingLabs

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://gliadomain.com	0%	URL Reputation	safe
https://poalim.xyz	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://reshim.org	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://nourishingpursuits.com	0%	URL Reputation	safe
https://medonet.pl	0%	URL Reputation	safe
https://unotv.com	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
https://zdrowietvn.pl	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://songstats.com	0%	URL Reputation	safe
https://baomoi.com	0%	URL Reputation	safe
https://supereva.it	0%	URL Reputation	safe
https://elfinancierocr.com	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://rws1nvtvt.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://hearty.gift	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://heartymail.com	0%	URL Reputation	safe
https://p106.net	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://radio2.be	0%	URL Reputation	safe
https://finn.no	0%	URL Reputation	safe
https://hc1.com	0%	URL Reputation	safe
https://kompas.tv	0%	URL Reputation	safe
https://mystudentdashboard.com	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://smaker.pl	0%	URL Reputation	safe
https://mercadopago.com.mx	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://talkdeskqaid.com	0%	URL Reputation	safe
https://mercadopago.com.pe	0%	URL Reputation	safe
https://cardsayings.net	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://pudelek.pl	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://cookreactor.com	0%	URL Reputation	safe
https://wildixin.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://cognitiveai.ru	0%	URL Reputation	safe
https://nacion.com	0%	URL Reputation	safe
https://chennien.com	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
https://deccoria.pl	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
https://talkdeskstgid.com	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://carcostadvisor.be	0%	URL Reputation	safe
https://salemovetravel.com	0%	URL Reputation	safe
https://sapo.io	0%	URL Reputation	safe
https://wpext.pl	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://poalim.site	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://smpn106jkt.sch.id	0%	URL Reputation	safe
https://elpais.uy	0%	URL Reputation	safe
https://landyrev.com	0%	URL Reputation	safe
https://the42.ie	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://tucarro.com.ve	0%	URL Reputation	safe
https://rws3nvtvt.com	0%	URL Reputation	safe
https://eleconomista.net	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	URL Reputation	safe
https://clmbtech.com	0%	URL Reputation	safe
https://standardsandpraiserepurpose.com	0%	URL Reputation	safe
https://salemovefinancial.com	0%	URL Reputation	safe
https://mercadopago.com.br	0%	URL Reputation	safe
https://commentcamarche.net	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.videolan.org	213.36.253.2	true	false	unknown
www.google.com	216.58.212.132	true	false	unknown
206.23.85.13.in-addr.arpa	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
file:///C:/Users/user/Desktop/download/download-windows.html	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_151.6.dr, chromecache_149.6.dr	false	URL Reputation: safe	unknown
https://wieistmeineip.de	sets.json.4.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.4.dr	false	URL Reputation: safe	unknown
https://gliadomain.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://poalim.xyz	sets.json.4.dr	false	URL Reputation: safe	unknown
https://mercadolivre.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://www.paypal.com/cgi-bin/webscr	download-windows.html.2.dr	false		unknown
https://addons.videolan.org/browse/cat/323/ord/latest/	wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	false		unknown
https://reshim.org	sets.json.4.dr	false	URL Reputation: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_150.6.dr, chromecache_148.6.dr	false	URL Reputation: safe	unknown
https://nourishingpursuits.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://oss.maxcdn.com/respond/1.4.2/respond.min.js	download-windows.html.2.dr	false		unknown
https://medonet.pl	sets.json.4.dr	false	URL Reputation: safe	unknown
https://unotv.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.br	sets.json.4.dr	false	URL Reputation: safe	unknown
https://joyreactor.cc	sets.json.4.dr	false		unknown
https://zdrowietvn.pl	sets.json.4.dr	false	URL Reputation: safe	unknown
https://johndeere.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://songstats.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://baomoi.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://supereva.it	sets.json.4.dr	false	URL Reputation: safe	unknown
https://elfinancierocr.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://www.videolan.org/thank_you.html	download-windows.html.2.dr	false		unknown
https://bolasport.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://rws1nvtvt.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://desimartini.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.4.dr	false	URL Reputation: safe	unknown
https://hearty.gift	sets.json.4.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://heartymail.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.4.dr	false		unknown
https://p106.net	sets.json.4.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_148.6.dr	false	URL Reputation: safe	unknown
https://www.twitter.com/videolan	wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	false		unknown
https://radio2.be	sets.json.4.dr	false	URL Reputation: safe	unknown
https://finn.no	sets.json.4.dr	false	URL Reputation: safe	unknown
https://hc1.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.4.dr	false	URL Reputation: safe	unknown
https://mystudentdashboard.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://smaker.pl	sets.json.4.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.4.dr	false	URL Reputation: safe	unknown
https://p24.hu	sets.json.4.dr	false	URL Reputation: safe	unknown
https://talkdeskqaid.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://24.hu	sets.json.4.dr	false		unknown
https://mercadopago.com.pe	sets.json.4.dr	false	URL Reputation: safe	unknown
https://cardsayings.net	sets.json.4.dr	false	URL Reputation: safe	unknown
https://wiki.videolan.org/	wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042258109.0000000000FE0000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	false		unknown
https://text.com	sets.json.4.dr	false		unknown
https://mightytext.net	sets.json.4.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.4.dr	false	URL Reputation: safe	unknown
http://cuberto.com/	wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042258109.0000000000FE0000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	false		unknown
https://hazipatika.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://wildixin.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://eworkbookcloud.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://cognitiveai.ru	sets.json.4.dr	false	URL Reputation: safe	unknown
https://nacion.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://chennien.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://drimer.travel	sets.json.4.dr	false	URL Reputation: safe	unknown
https://deccoria.pl	sets.json.4.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.4.dr	false	URL Reputation: safe	unknown
https://talkdeskstgid.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://naukri.com	sets.json.4.dr	false		unknown
https://interia.pl	sets.json.4.dr	false		unknown
https://bonvivir.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.be	sets.json.4.dr	false	URL Reputation: safe	unknown
https://salemovetravel.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.4.dr	false	URL Reputation: safe	unknown
https://wpext.pl	sets.json.4.dr	false	URL Reputation: safe	unknown
https://welt.de	sets.json.4.dr	false	URL Reputation: safe	unknown
https://poalim.site	sets.json.4.dr	false	URL Reputation: safe	unknown
https://drimer.io	sets.json.4.dr	false	URL Reputation: safe	unknown
https://infoedgeindia.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.4.dr	false	URL Reputation: safe	unknown
https://cognitive-ai.ru	sets.json.4.dr	false	URL Reputation: safe	unknown
https://cafemedia.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://graziadaily.co.uk	sets.json.4.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.4.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.4.dr	false	URL Reputation: safe	unknown
https://www.madebyargon.com	wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042258109.0000000000FE0000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	false		unknown
https://smpn106jkt.sch.id	sets.json.4.dr	false	URL Reputation: safe	unknown
https://elpais.uy	sets.json.4.dr	false	URL Reputation: safe	unknown
https://landyrev.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://the42.ie	sets.json.4.dr	false	URL Reputation: safe	unknown
https://commentcamarche.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://creativecommons.org/licenses/by-sa/3.0/us/	wget.exe, 00000002.00000003.2042164852.0000000000FD6000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042258109.0000000000FE0000.00000004.00000020.00020000.00000000.sdmp, wget.exe, 00000002.00000003.2042164852.0000000000FDE000.00000004.00000020.00020000.00000000.sdmp, download-windows.html.2.dr	false		unknown
https://tucarro.com.ve	sets.json.4.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://eleconomista.net	sets.json.4.dr	false	URL Reputation: safe	unknown
https://helpdesk.com	sets.json.4.dr	false		unknown
https://mercadolivre.com.br	sets.json.4.dr	false	URL Reputation: safe	unknown
https://clmbtech.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://07c225f3.online	sets.json.4.dr	false		unknown
https://salemovefinancial.com	sets.json.4.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.br	sets.json.4.dr	false	URL Reputation: safe	unknown
https://commentcamarche.net	sets.json.4.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
216.58.212.132	www.google.com	United States	15169	GOOGLEUS	false
213.36.253.2	www.videolan.org	France	12322	PROXADFR	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1530826
Start date and time:	2024-10-10 15:31:12 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	urldownload.jbs
Sample URL:	https://www.videolan.org/vlc/download-windows.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean7.win@25/26@5/5

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 173.194.76.84, 142.250.186.46, 142.250.186.72, 34.104.35.123, 142.250.185.232, 142.250.185.206, 142.250.186.174, 199.232.210.172, 192.229.221.95, 216.58.212.163, 142.250.185.238
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, images.videolan.org, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, www.google-analytics.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.videolan.org/vlc/download-windows.html

URL: file:///C:/Users/user/Desktop/download/download-windows.html Model: jbxai

{
"brands":["VideoLAN"],
"text":"VideoLAN association Toggle navigation",
"contains_trigger_text":false,
"trigger_text":"",
"prominent_button_name":"unknown",
"text_input_field_labels":"unknown",
"pdf_icon_visible":false,
"has_visible_captcha":false,
"has_urgent_text":false,
"has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 12:32:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.973908339988129
Encrypted:	false
SSDEEP:	48:8WdMoTssgwSHjidAKZdA19ehwiZUklqehVy+3:8U/+2y
MD5:	07AE7335E37DC51651E6A086445AE89E
SHA1:	F74E5EA1D4A782C6764C1395639DEAC6921A0742
SHA-256:	C0A5C262ACF30D359B4D1280A372E01F1C0EAFCD8A6DFC92CAB3C9395B43B64D
SHA-512:	A19DEE1E8678074597FD4BADA6D89BEE7D4E50D5F8111565C2F8C9398CDAAEE4D0C71DDA6AE559D8B78AA74A1F4678B9C3F61BA74D78258C1D7AEF73B0215076
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....(J.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IJY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........(4F......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 12:32:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9884601082666893
Encrypted:	false
SSDEEP:	48:8IdMoTssgwSHjidAKZdA1weh/iZUkAQkqehmy+2:8W/c9Qry
MD5:	CFF8695A7F468000481978AC44F3E118
SHA1:	6DBDEE8073DA0BF644FA98FD6DFC19DDA92535F2
SHA-256:	EE9DFE66131BB08676C8FD0D7685C2EBBCA16EFDD25154FB37D67C688352CAFB
SHA-512:	4574F989033CCA6AEE8D763E642F0ADFD760AD33A0BEB31106465FE7D5DA2D111B099AC1FDA31CDB6DD4B79DEB02F983E50C002FBB84DBE8CAC5D1C6B8C3A571
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Z.8.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IJY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........(4F......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0005008800632975
Encrypted:	false
SSDEEP:	48:8xSdMoTssgwsHjidAKZdA14tseh7sFiZUkmgqeh7sMy+BX:8xY/Snyy
MD5:	E5B7341E4AB74B21A1EBD59290349EFA
SHA1:	60DA168A8C00FF2D34DFDB5A0608042E02F98060
SHA-256:	3D659A9A8548E0EDBA53245A4E0B0190715B39CBBC9BD4EF10963799FE368962
SHA-512:	7E0981D5BDF7E2DF1EAC6FBAB7954189F95B19873C10E74E6A7B48A7C43EC7B5A51FF2197881BF8367706063818219703D1DAA6AE10346937B74F592879A4C82
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IJY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........(4F......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 12:32:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.988039674813652
Encrypted:	false
SSDEEP:	48:8XvdMoTssgwSHjidAKZdA1vehDiZUkwqeh6y+R:8H/nUy
MD5:	40F02B8EC68D3C4C3AC6095932C6A6AA
SHA1:	BCFC9999F0A1731C44641C528B918741578E9ED0
SHA-256:	2A31FCABA76E18B907EA3AE487BACA69C23FE3BB7C07023DA01D8455072EC5C9
SHA-512:	3CE9D92F3727ED67202F97B49CDC102C2A71BAE7AE334BAE81A8590F68DE7D6F31E2DFA80F25E1125DCCD0D6A97896BD3F1C2ACCD8D2CEABA0354FEB08C1B032
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....!O$.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IJY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........(4F......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 12:32:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.97724371832748
Encrypted:	false
SSDEEP:	48:8sdMoTssgwSHjidAKZdA1hehBiZUk1W1qeh4y+C:8i/X9Yy
MD5:	78D1DA876857374988F58386EE531D0C
SHA1:	8BC9E3B9A49A2CEA9EA347D00E8F9C3C4EC52D9F
SHA-256:	5D90C228916E4198502B952ADE5C7EF1DA0A5774D9C76E5C022EF6DB72FEBE58
SHA-512:	1391A54050BC7931205823188ACB22B95E8CDBEAAB29ED9DEB2B89665C5B1AB2BFA03DA4D96D85812603F3C04CA07D0E7C02FBED1730CAAE0F4CB0187D69384C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......?.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IJY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........(4F......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 12:32:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9834566008278114
Encrypted:	false
SSDEEP:	48:8b/adMoTssgwSHjidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbyy+yT+:8bo/fT/TbxWOvTbyy7T
MD5:	868C17F710F34EFEF9548492703D38F9
SHA1:	EDE68ECA5B3D724B9463D4531E06B38A39E90440
SHA-256:	25D8BB0A460D4795FFBBC2ACAEEAABF9BBBD3737963854BF81B93B6AE6773461
SHA-512:	1BB5EE027B98560D8537DE9BB99DFB83125A6547737F2DBE6C3D1A3FFA8DCC613689EEC023F8696773351A666C2007C0548C8F63F7D2206B42765EE9FB3F7FCA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....be......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IJY.l....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJY.l....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VJY.l....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VJY.l..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VJY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........(4F......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Desktop\cmdline.out

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	571
Entropy (8bit):	5.032339856214794
Encrypted:	false
SSDEEP:	12:HRHYm1KUxBjOCMtKUEKUzStKUEKUu5yT1De5RhKKz1DbV3JRbK7bBmvXavKAiV34:xHKoxQKjKnKjK7AxePgKz1NPb8d9XQPA
MD5:	863D9A167DAEB57C98F194078E41C75C
SHA1:	BFFE2A8243FAB4D98D88C124A937F63C78CD1072
SHA-256:	28F8425D78C0988A3AC43D6515E201195AD71FB4E5BFD114E1F300DD283D9CCB
SHA-512:	AB674F3931EDF2D54F997862CF93C9B7D240A1B39A61662CAEAD934AAFD7521A9045C681C215768007443AF94D347E43D7C62535BFA034FD18A751628AEFCEDC
Malicious:	false
Reputation:	low
Preview:	--2024-10-10 09:32:01-- https://www.videolan.org/vlc/download-windows.html..Resolving www.videolan.org (www.videolan.org)... 213.36.253.2..Connecting to www.videolan.org (www.videolan.org)\|213.36.253.2\|:443... connected...HTTP request sent, awaiting response... 200 OK..Length: 33864 (33K) [text/html]..Saving to: 'C:/Users/user/Desktop/download/download-windows.html'.... 0K .......... .......... .......... ... 100% 1.04M=0.03s....2024-10-10 09:32:02 (1.04 MB/s) - 'C:/Users/user/Desktop/download/download-windows.html' saved [33864/33864]....

C:\Users\user\Desktop\download\download-windows.html

Download File

Process:	C:\Windows\SysWOW64\wget.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1131)
Category:	dropped
Size (bytes):	33864
Entropy (8bit):	4.67407216332541
Encrypted:	false
SSDEEP:	192:tuQIhezB5jTzySbXBOcXs1Hkqs+dRinwLf8zANFgw6q5lUwWVd98aS+za+qGinXw:4QSezbjqsUkR+NVS+iaVS7RGW6Pcr
MD5:	F21431494DA6D2945CBF714246B5895E
SHA1:	34A7E1B033888B7C6992012670699FB6F0CD9F22
SHA-256:	2A94CC9BA4037F781CF363E1C3A6382C62BC4F25F22B2FAAD19768DA6BE28E78
SHA-512:	7DE90B288220CE8585979CDEF17941EC2B023DDE324AE5A703642827F5AD2F772D99F4D0E083A41D0051610959331E374BE204BECCBC31BBF9826FEDD8AFABD7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. <html lang="en_GB" >. <head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />. <meta http-equiv="X-UA-Compatible" content="IE=edge" />. <meta name="viewport" content="width=device-width, initial-scale=1" />. . <meta name="Author" content="VideoLAN" />. <meta name="Keywords" content=. "VideoLAN, VLC, VLC player, VLC media player, download, media player, player download, codec, encoder, media converter, video, video player,. multimedia, multicast, x262, x264, x265, DVBlast, Windows, Linux, Unix, BeOS, BSD, MacOS, MacOS X, OSX, Android, Streaming,. DVD, Matroska, Blu-Ray, FLV, Xvid, MPEG, MPEG2, MPEG4, H264, DivX, MKV, m2ts, open source, free software, floss, free" />.. <meta name="Description" content="Download official VLC media player for Windows" />. <meta name="apple-itunes-app" content="app-id=650377962"/>. <title>Download official VLC

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Reputation:	low
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\Google.Widevine.CDM.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2877728
Entropy (8bit):	6.868480682648069
Encrypted:	false
SSDEEP:	49152:GB6BoH5sOI2CHusbKOdskuoHHVjcY94RNETO2WYA4oPToqnQ3dK5zuqvGKGxofFo:M67hlnVjcYGRNETO2WYA4oLoqnJuZI5
MD5:	477C17B6448695110B4D227664AA3C48
SHA1:	949FF1136E0971A0176F6ADEA8ADCC0DD6030F22
SHA-256:	CB190E7D1B002A3050705580DD51EBA895A19EB09620BDD48D63085D5D88031E
SHA-512:	1E267B01A78BE40E7A02612B331B1D9291DA8E4330DEA10BF786ACBC69F25E0BAECE45FB3BAFE1F4389F420EBAA62373E4F035A45E34EADA6F72C7C61D2302ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....fd.........." ......(..........A&.......................................,.......,...`A.........................................V......V......`,......`+..p....+. )...p,......D.8....................C.(.....(.8...........p\..............................text.....(.......(................. ..`.rdata..h.....(.......(.............@..@.data....l......&.................@....pdata...p...`+..r.................@..@.00cfg..(.....+......p+.............@..@.gxfg....$....+..&...r+.............@..@.retplnel.... ,.......+..................tls.........0,.......+.............@....voltbl.D....@,.......+................._RDATA.......P,.......+.............@..@.rsrc........`,.......+.............@..@.reloc.......p,.......+.............@..B........................................................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	6.02086725086136
Encrypted:	false
SSDEEP:	48:p/hCdQAdJjRkakCi0LXjX9mqjW6JmfQkNWQzXXf2gTs:RtQ1aaxXrjW6JuQEWQKas
MD5:	3E839BA4DA1FFCE29A543C5756A19BDF
SHA1:	D8D84AC06C3BA27CCEF221C6F188042B741D2B91
SHA-256:	43DAA4139D3ED90F4B4635BD4D32346EB8E8528D0D5332052FCDA8F7860DB729
SHA-512:	19B085A9CFEC4D6F1B87CC6BBEEB6578F9CBA014704D05C9114CFB0A33B2E7729AC67499048CB33823C884517CBBDC24AA0748A9BB65E9C67714E6116365F1AB
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KTPeHzS0ybFaz3_br3ASYWHjb6Ctul92067u2JMwtNYYm-4KxLiSkJZNBIzhm6hNSEW2p5kUEvHD0TjhhFGCZnWm9titj2bqJayCOAGxZb5BO74JJCRfy5Kwr1KSS4nvocsZepnHBmCiG2OV3by-Lyf1h1uU3X3bDfD92O0vJzrA8rwL2LrwIk-BolLo5nlM0I_MZwg8DhZ8SFBu9GGRVB2XrailDrv4SgupFE9gqA1HY6kjRjoyoAHbRRxZdBNNt9IKNdxNyaF9NcNRY8dAedNQ9Tw3YNp5jB7R9lcjO4knn58RdH2h_GiJ4l96StcXA4e7cqbJ77P-c

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.974403644129192
Encrypted:	false
SSDEEP:	3:SLVV8T+WSq2ykFDJp9qBn:SLVqZS5p0B
MD5:	D30A5BBC00F7334EEDE0795D147B2E80
SHA1:	78F3A6995856854CAD0C524884F74E182F9C3C57
SHA-256:	A08C1BC41DE319392676C7389048D8B1C7424C4B74D2F6466BCF5732B8D86642
SHA-512:	DACF60E959C10A3499D55DC594454858343BF6A309F22D73BDEE86B676D8D0CED10E86AC95ECD78E745E8805237121A25830301680BD12BFC7122A82A885FF4B
Malicious:	false
Reputation:	low
Preview:	1.c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	145
Entropy (8bit):	4.595307058143632
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFooG+HhFFKS18CWjhXLXGPQ3TRpvF/FHddTcplFHddTcVYA:F6VlM5PpKS18hRIA
MD5:	BBC03E9C7C5944E62EFC9C660B7BD2B6
SHA1:	83F161E3F49B64553709994B048D9F597CDE3DC6
SHA-256:	6CCE5AD8D496BC5179FA84AF8AFC568EEBA980D8A75058C6380B64FB42298C28
SHA-512:	FB80F091468A299B5209ACC30EDAF2001D081C22C3B30AAD422CBE6FEA7E5FE36A67A8E000D5DD03A30C60C30391C85FA31F3931E804C351AB0A71E9A978CC0F
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "windows-mf-cdm",. "version": "1.0.2738.0",. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].}

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4201)
Category:	downloaded
Size (bytes):	224136
Entropy (8bit):	5.549306376626027
Encrypted:	false
SSDEEP:	3072:qjKAkKLX3WPB5a+dH0cn7PZ+tDCOrreTpD5372CnUkj+:cKG3+Dhs3HkpD5372CnUkq
MD5:	D131268C2A47A634780DD70C482B06E1
SHA1:	7749DF93CEF86F1243AD40307FFAE8D689DCFE18
SHA-256:	C05795F1C4FB9CDA5A75D35DEB6ABDC0EFEFBB557C2D9AAEE7CEAABFA8D08E4D
SHA-512:	23A1D24CA13DD3F8D710BA42041A53CBFBA267E9CE00972DE9D5FDA624314FC1684D0769EC410A455BCD5937FB11A903635D2E4954DD1273BB8A50E80838866E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-38853043-1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__c

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4201)
Category:	dropped
Size (bytes):	224146
Entropy (8bit):	5.549580026654396
Encrypted:	false
SSDEEP:	3072:qjKAkKLX3WPB5q+dH0cn7PZ+tDCOrreTpD5372CnUkjg:cKG3+Dxs3HkpD5372CnUkM
MD5:	54EEBF5330CC1FAAD55A1A8301828797
SHA1:	8050D984C80625D6962785AC07C28144ED26213E
SHA-256:	EE31B480371B0BA2DEC00ABECCCBEB8CDE3B7FEC5E412FB84AF3B5BD5B5F39CB
SHA-512:	1299271760BCFDACC9DEBD37A3552C1CCC19CF8DC36A5D95AA85F898620C66ACBD122C4661D7EB9AFB675D18B9A30322B9D06D0E71FEF8FF48430748D4EF9C57
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__c

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	273751
Entropy (8bit):	5.573200201238701
Encrypted:	false
SSDEEP:	6144:skOKG3+NKax0mw1pD5372CnOgbVlFlr1VQ:BOxSKaxkF9Y
MD5:	54FFF94E111C737B69B32D3FA88FB30A
SHA1:	373213417E7A3740596E29731F44832414ACECE3
SHA-256:	D2CCECA8411FCBA2B5240E1CB8EE2EBA163F91C0871BF9382679E73C31D5A0D3
SHA-512:	E1A38209090A24E9D7EB7EF97644C4F58BFE113267177F95196C12FAE48E5351D0FADD2EC2619AF0E35806F6849BCE868774B2AB76254120B6039AABFCE31C11
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","videolan\\.org","www\\.videolan\\.org","get\\.videolan\\.org"],"tag_id":12},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_l

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	273741
Entropy (8bit):	5.573099703723633
Encrypted:	false
SSDEEP:	6144:skOKG3+NKa00mw1pD5372CnOgbVlFlr1V5:BOxSKa0kF9B
MD5:	CC77F08A399DEB00B266D09270FC2D13
SHA1:	4EAF5481EB4667853F045CDA4AF8582E31D94090
SHA-256:	91870CE977DC94FA53B1E2971D9ECD04DDFC3CC1F56D67902F85E41D4AC4E150
SHA-512:	3803FFABC7EF7DC12E95BCF19907FD1DEEA013A70FC84539377D1DA4EC5063ABAA7F688012E1302A473DBE5F47F542B0879498E7D2559DD24F4B292F99176B2A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-GZPMWXW7NJ&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","videolan\\.org","www\\.videolan\\.org","get\\.videolan\\.org"],"tag_id":12},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_l

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 15:32:02.316262007 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:02.316351891 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:02.441338062 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:02.818702936 CEST	49704	443	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:02.818747997 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:02.818823099 CEST	49704	443	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:02.821021080 CEST	49704	443	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:02.821033955 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:03.454396009 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:03.454735994 CEST	49704	443	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:03.456790924 CEST	49704	443	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:03.456803083 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:03.457110882 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:03.458226919 CEST	49704	443	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:03.503417015 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:03.829484940 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:03.829503059 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:03.829551935 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:03.829634905 CEST	49704	443	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:03.829652071 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:03.829669952 CEST	49704	443	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:03.829854012 CEST	49704	443	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:03.842612982 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:03.842633963 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:03.843163967 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:03.843216896 CEST	49704	443	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:03.843219042 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:03.843241930 CEST	49704	443	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:03.843265057 CEST	49704	443	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:03.864200115 CEST	49704	443	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:03.864224911 CEST	443	49704	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:06.567404032 CEST	49709	445	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:06.572917938 CEST	445	49709	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:06.574260950 CEST	49709	445	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:06.575884104 CEST	49709	445	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:06.580799103 CEST	445	49709	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:08.421674013 CEST	445	49709	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:08.426156998 CEST	49709	445	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:08.426156998 CEST	49709	445	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:10.077413082 CEST	49719	445	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:10.082365990 CEST	445	49719	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:10.082473993 CEST	49719	445	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:10.082509995 CEST	49719	445	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:10.087435007 CEST	445	49719	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:10.915465117 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 10, 2024 15:32:10.915499926 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 10, 2024 15:32:10.915566921 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 10, 2024 15:32:10.915818930 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 10, 2024 15:32:10.915832043 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 10, 2024 15:32:11.105390072 CEST	49722	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:11.105427027 CEST	443	49722	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:11.105519056 CEST	49722	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:11.107462883 CEST	49722	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:11.107480049 CEST	443	49722	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:11.615349054 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 10, 2024 15:32:11.615742922 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 10, 2024 15:32:11.615765095 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 10, 2024 15:32:11.616769075 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 10, 2024 15:32:11.616841078 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 10, 2024 15:32:11.618171930 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 10, 2024 15:32:11.618222952 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 10, 2024 15:32:11.664412022 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 10, 2024 15:32:11.664432049 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 10, 2024 15:32:11.711289883 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 10, 2024 15:32:11.788948059 CEST	445	49719	213.36.253.2	192.168.2.5
Oct 10, 2024 15:32:11.789005995 CEST	49719	445	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:11.789047956 CEST	49719	445	192.168.2.5	213.36.253.2
Oct 10, 2024 15:32:11.929781914 CEST	443	49722	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:11.929847002 CEST	49722	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:11.929894924 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:11.929997921 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:11.933862925 CEST	49722	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:11.933881998 CEST	443	49722	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:11.934286118 CEST	443	49722	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:11.976881027 CEST	49722	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:11.978028059 CEST	49722	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:12.023407936 CEST	443	49722	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:12.055183887 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:12.216480970 CEST	443	49722	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:12.216562033 CEST	443	49722	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:12.216635942 CEST	49722	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:12.216789007 CEST	49722	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:12.216815948 CEST	443	49722	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:12.216826916 CEST	49722	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:12.216833115 CEST	443	49722	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:12.262727022 CEST	49723	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:12.262775898 CEST	443	49723	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:12.262872934 CEST	49723	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:12.263179064 CEST	49723	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:12.263194084 CEST	443	49723	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:13.022130013 CEST	443	49723	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:13.022226095 CEST	49723	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:13.121476889 CEST	49723	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:13.121507883 CEST	443	49723	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:13.121856928 CEST	443	49723	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:13.123007059 CEST	49723	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:13.167414904 CEST	443	49723	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:13.316572905 CEST	443	49723	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:13.316654921 CEST	443	49723	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:13.316740990 CEST	49723	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:13.317414999 CEST	49723	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:13.317425966 CEST	443	49723	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:13.317435980 CEST	49723	443	192.168.2.5	95.100.63.156
Oct 10, 2024 15:32:13.317440987 CEST	443	49723	95.100.63.156	192.168.2.5
Oct 10, 2024 15:32:13.694232941 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 10, 2024 15:32:13.694338083 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:20.645699024 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:20.645757914 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:20.645826101 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:20.646892071 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:20.646903992 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:21.210041046 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:21.210077047 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:21.210140944 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:21.210566044 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:21.210580111 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:21.270265102 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:21.270359039 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:21.273422956 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:21.273442030 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:21.273744106 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:21.321142912 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:21.476313114 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 10, 2024 15:32:21.476386070 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 10, 2024 15:32:21.476501942 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 10, 2024 15:32:21.885198116 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:21.885292053 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:21.887226105 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:21.887244940 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:21.887675047 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:21.905900002 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:21.925795078 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:21.947417021 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:21.967425108 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:22.006643057 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.006668091 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.006685972 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.006726027 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.006756067 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.006771088 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.006800890 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.089804888 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.089835882 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.089888096 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.089917898 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.089950085 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.089970112 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.090979099 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.090996027 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.091054916 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.091062069 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.091114998 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.119539022 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:22.119565010 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:22.119573116 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:22.119604111 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:22.119626999 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:22.119653940 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:22.119667053 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:22.119676113 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:22.119705915 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:22.119909048 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:22.119957924 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:22.119962931 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:22.120152950 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:22.120207071 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:22.175802946 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.175833941 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.175971031 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.176001072 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.176660061 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.176836967 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.176855087 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.176897049 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.176904917 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.178569078 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.178596973 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.178627014 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.178633928 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.178658962 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.178685904 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.179516077 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.179534912 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.179563046 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.179569960 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.179584026 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.179603100 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.262607098 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.262631893 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.262736082 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.262764931 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.262974024 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.263144016 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.263160944 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.263205051 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.263212919 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.263235092 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.263248920 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.264110088 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.264125109 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.264183044 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.264189959 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.264262915 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.264965057 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.264990091 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.265031099 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.265037060 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.265110970 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.265270948 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.265286922 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.265341997 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.265350103 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.265496969 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.266169071 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.266184092 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.266236067 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.266247034 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.266320944 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.266961098 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.267016888 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.267024994 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.267035961 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.267077923 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.267121077 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.267138004 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.267149925 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.267154932 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.317501068 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.317540884 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.317796946 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.317796946 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.317825079 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.318507910 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.318507910 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.318532944 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.319709063 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.319791079 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.319859028 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.319966078 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.319981098 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.319986105 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.320004940 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.320921898 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.320974112 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.321685076 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.321712971 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.321717978 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.321826935 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.321847916 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.321858883 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.321930885 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:22.321944952 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:22.840564013 CEST	49721	443	192.168.2.5	216.58.212.132
Oct 10, 2024 15:32:22.840591908 CEST	443	49721	216.58.212.132	192.168.2.5
Oct 10, 2024 15:32:22.850323915 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:22.850368977 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:22.850394964 CEST	49724	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:22.850402117 CEST	443	49724	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:23.132580042 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.134083986 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.134124041 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.136054039 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.136059999 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.149540901 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.150804996 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.150836945 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.151274920 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.151279926 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.155771971 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.156202078 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.156218052 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.156661987 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.156666040 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.160500050 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.160841942 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.160851002 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.161037922 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.161336899 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.161362886 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.161365986 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.161370993 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.161921978 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.161926985 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.231966972 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.231985092 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.232042074 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.232048988 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.232088089 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.233119011 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.233149052 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.233161926 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.233166933 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.248842001 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.248887062 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.248965979 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.249201059 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.249217033 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.254945993 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.255012989 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.255264997 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.255821943 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.255845070 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.255853891 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.255860090 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.256830931 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.256900072 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.257020950 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.258383036 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.258397102 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.258405924 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.258409977 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.261738062 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.261789083 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.261856079 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.262058020 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.262073040 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.263832092 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.263849974 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.263895035 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.264064074 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.264075994 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.265594006 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.265631914 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.265686035 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.265696049 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.265738010 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.265753031 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.265799999 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.265836954 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.265849113 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.265851974 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.265883923 CEST	49729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.265887022 CEST	443	49729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.267307997 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.267329931 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.267594099 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.267610073 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.267667055 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.267712116 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.267926931 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.267939091 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.268006086 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.268011093 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.270390034 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.270411015 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.270462990 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.270592928 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.270608902 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.271609068 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.271641016 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.271692038 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.271941900 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.271960974 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.816487074 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:23.816636086 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:23.816934109 CEST	49741	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:23.816970110 CEST	443	49741	23.1.237.91	192.168.2.5
Oct 10, 2024 15:32:23.817039967 CEST	49741	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:23.817334890 CEST	49741	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:23.817348957 CEST	443	49741	23.1.237.91	192.168.2.5
Oct 10, 2024 15:32:23.821466923 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 10, 2024 15:32:23.821569920 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 10, 2024 15:32:23.931323051 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.931607962 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.931889057 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.931914091 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.932213068 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.932229042 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.932322025 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.933093071 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.933114052 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.933700085 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.933706045 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.933887959 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.933892012 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.934390068 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.934398890 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.959271908 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.964294910 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.976438046 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.976454973 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.977809906 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.977844000 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.978281975 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.978301048 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:23.979404926 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:23.979410887 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.047605991 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.047677040 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.047934055 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.047970057 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.047991991 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.048003912 CEST	49737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.048011065 CEST	443	49737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.050580978 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.050622940 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.050698042 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.050844908 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.050858021 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.053626060 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.053682089 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.053745985 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.053906918 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.053920984 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.053925991 CEST	49738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.053930998 CEST	443	49738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.056468964 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.056499004 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.056649923 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.056759119 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.056773901 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.057043076 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.057105064 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.057763100 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.057763100 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.057763100 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.059180975 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.059216976 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.059401989 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.059494972 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.059509993 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.076864004 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.076910973 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.077212095 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.077212095 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.077806950 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.077819109 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.079215050 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.079238892 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.079299927 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.079427958 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.079437017 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.083481073 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.083543062 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.083637953 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.083736897 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.083736897 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.083751917 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.083761930 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.085541964 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.085549116 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.085623026 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.085750103 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.085756063 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.367811918 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.367846966 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.460654974 CEST	443	49741	23.1.237.91	192.168.2.5
Oct 10, 2024 15:32:24.460805893 CEST	49741	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:24.708476067 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.708966970 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.708991051 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.710433006 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.710438013 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.712167978 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.712500095 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.712537050 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.712878942 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.712883949 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.720041990 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.720381975 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.720395088 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.720774889 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.720779896 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.726824999 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.727406025 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.727420092 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.727813005 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.727817059 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.752690077 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.753204107 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.753222942 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.753804922 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.753809929 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.808579922 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.808648109 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.808718920 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.808898926 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.808921099 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.808933020 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.808938980 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.812103033 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.812127113 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.812207937 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.812346935 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.812357903 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.829339027 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.829412937 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.829468012 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.829694033 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.829720020 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.829731941 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.829737902 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.831051111 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.831106901 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.831397057 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.831516027 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.831516027 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.831532001 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.831542015 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.833448887 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.833487988 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.833939075 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.833939075 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.833965063 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.834192038 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.834233999 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.834297895 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.834445000 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.834455967 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.859137058 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.859199047 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.859253883 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.859474897 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.859497070 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.859508038 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.859513044 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.862128019 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.862159967 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.862364054 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.862505913 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.862518072 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.913197994 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.913278103 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.913465977 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.913553953 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.913574934 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.913600922 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.913606882 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.916418076 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.916457891 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:24.916659117 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.916814089 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:24.916826010 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.620335102 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.621555090 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.621597052 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.622311115 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.622318029 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.624574900 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.625348091 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.625348091 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.625386000 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.625400066 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.628998995 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.629682064 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.629682064 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.629703999 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.629724979 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.699767113 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.700336933 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.700352907 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.702151060 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.702155113 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.721369982 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.721438885 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.721633911 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.721684933 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.721684933 CEST	49750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.721705914 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.721714973 CEST	443	49750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.724570036 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.724617958 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.724828005 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.724971056 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.724981070 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.730003119 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.730066061 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.730182886 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.730314016 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.730329990 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.730359077 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.730365038 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.732673883 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.732707977 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.732881069 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.732955933 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.732971907 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.734610081 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.734795094 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.734942913 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.734942913 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.734975100 CEST	49748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.734988928 CEST	443	49748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.737405062 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.737413883 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.737829924 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.737829924 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.737847090 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.799377918 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.799566984 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.799779892 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.799781084 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.799828053 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.799854040 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.802738905 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.802803993 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:25.802995920 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.803138018 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:25.803152084 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.370503902 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.371100903 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.371138096 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.371280909 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.371942043 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.371948957 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.371992111 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.371992111 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.372006893 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.372020960 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.372459888 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.372997999 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.373023987 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.373384953 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.373392105 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.455879927 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.456868887 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.456904888 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.457216024 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.457223892 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.472929955 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.473011971 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.473146915 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.473177910 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.473197937 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.473208904 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.473213911 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.473871946 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.474046946 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.474128008 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.474255085 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.474255085 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.474272966 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.474282026 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.475733995 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.475780010 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.476048946 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.476198912 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.476216078 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.476260900 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.476296902 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.476447105 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.476586103 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.476603031 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.557933092 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.558072090 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.558276892 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.558368921 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.558393002 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.558406115 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.558413029 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.560988903 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.561033010 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.561115026 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.561274052 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.561289072 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.759135008 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.759315968 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.759381056 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.759629965 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.759654045 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.759660006 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.759665966 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.762600899 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.762649059 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:26.762775898 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.763140917 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:26.763156891 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.054265022 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.054719925 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.054747105 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.055188894 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.055196047 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.055922985 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.058322906 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.058322906 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.058346033 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.058371067 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.154100895 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.154175997 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.154328108 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.154426098 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.154448986 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.154459953 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.154465914 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.156400919 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.156471014 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.157073021 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.157107115 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.157200098 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.157320023 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.157331944 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.157429934 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.157430887 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.157430887 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.159245014 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.159279108 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.160960913 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.160960913 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.161000013 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.233489990 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.234055996 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.234087944 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.234525919 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.234536886 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.334673882 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.334752083 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.335310936 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.335310936 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.335310936 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.337832928 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.337867975 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.338201046 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.338242054 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.338247061 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.372456074 CEST	49757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.372483969 CEST	443	49757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.452258110 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.456012964 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.456048012 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.456624031 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.456631899 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.562330008 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.562391043 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.562489033 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.562674999 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.562696934 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.562707901 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.562714100 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.566153049 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.566183090 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.566359997 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.566515923 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.566530943 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.637909889 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.637933016 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.806164026 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.806648016 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.806675911 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.807125092 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.807128906 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.825530052 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.826293945 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.826314926 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.826462984 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.826469898 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.907613039 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.907684088 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.907927990 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.907928944 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.907928944 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.910455942 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.910515070 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.910744905 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.910744905 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.910780907 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.929449081 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.929519892 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.929629087 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.929820061 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.929820061 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.929837942 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.929851055 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.932852030 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.932888985 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:27.933115959 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.933248997 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:27.933265924 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.011028051 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.012034893 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.012034893 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.012058020 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.012079954 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.136352062 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.137015104 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.137038946 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.137655020 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.137661934 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.207901001 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.209003925 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.209003925 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.209059000 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.209099054 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.216069937 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.216116905 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.284961939 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.285033941 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.285286903 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.285286903 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.285329103 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.285346985 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.288480043 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.288511038 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.288769960 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.288769960 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.288794041 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.299349070 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.299443007 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.299599886 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.299644947 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.299644947 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.299660921 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.299671888 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.302253008 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.302306890 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.302413940 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.302567959 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.302578926 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.308557034 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.308968067 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.309103966 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.309103966 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.309145927 CEST	49763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.309182882 CEST	443	49763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.311496973 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.311537027 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.311713934 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.311781883 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.311790943 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.608067036 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.608645916 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.608683109 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.609276056 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.609282970 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.669680119 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.672214031 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.672214031 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.672236919 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.672251940 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.734302044 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.734384060 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.734631062 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.734631062 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.734631062 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.737561941 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.737613916 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.737796068 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.737984896 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.737998009 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.773263931 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.773333073 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.773719072 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.774034977 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.774061918 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.774234056 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.774243116 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.777023077 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.777059078 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.777153969 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.777335882 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.777347088 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.956286907 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.957425117 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.957437038 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.958132982 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.958138943 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.971096992 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.971662045 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.971693039 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.972620010 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.972624063 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.975286007 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.976216078 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.976236105 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:28.977726936 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:28.977730989 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.046864033 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.046907902 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.066133022 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.066220045 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.066431999 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.067401886 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.067424059 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.071983099 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.072055101 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.072630882 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.076837063 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.076901913 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.076977015 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.078531027 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.078566074 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.078598022 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.078605890 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.078772068 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.078772068 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.078792095 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.078802109 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.082421064 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.082451105 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.082505941 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.082741976 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.082784891 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.082843065 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.082870960 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.082906008 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.082973003 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.082998991 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.083010912 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.083173990 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.083178997 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.083187103 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.083192110 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.402009010 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.410126925 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.410167933 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.410648108 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.410659075 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.442842007 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.443707943 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.443759918 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.444226027 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.444231987 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.507498026 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.507571936 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.507734060 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.508148909 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.508174896 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.508189917 CEST	49769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.508196115 CEST	443	49769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.511271954 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.511308908 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.511398077 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.511573076 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.511580944 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.560313940 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.560389042 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.560488939 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.560766935 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.560789108 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.560801029 CEST	49770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.560806990 CEST	443	49770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.563771963 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.563821077 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.563930035 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.564153910 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.564167023 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.746524096 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.748405933 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.748503923 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.748542070 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.749142885 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.749155045 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.749452114 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.749480963 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.749840021 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.749845028 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.753127098 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.756926060 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.756962061 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.757365942 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.757370949 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.846029043 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.846111059 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.846390963 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.846453905 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.846474886 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.846488953 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.846496105 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.849467039 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.849500895 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.849586964 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.849714994 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.849725008 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.857383013 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.857450008 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.857671022 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.857713938 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.857713938 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.857736111 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.857747078 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.860898018 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.860949039 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.861031055 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.861242056 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.861253977 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.861363888 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.861529112 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.861584902 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.861629963 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.861629963 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.861649036 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.861661911 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.864115000 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.864125013 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:29.864217997 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.864339113 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:29.864346027 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.229243994 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.229754925 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.229780912 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.230202913 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.230206966 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.318623066 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.321110964 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.321139097 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.321573019 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.321579933 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.330888987 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.330950975 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.331001043 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.331178904 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.331197977 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.331219912 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.331224918 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.334016085 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.334059954 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.334140062 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.334300995 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.334316969 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.420252085 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.420322895 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.420538902 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.420710087 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.420732021 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.420744896 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.420751095 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.423235893 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.423276901 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.423346043 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.423501015 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.423513889 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.513705969 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.514064074 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.514228106 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.514257908 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.514689922 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.514693975 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.514904022 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.514909983 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.515235901 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.515239000 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.613526106 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.613612890 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.613796949 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.613899946 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.613950968 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.613985062 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.614042997 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.614062071 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.614072084 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.614077091 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.614154100 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.614154100 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.614159107 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.614166021 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.617139101 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.617191076 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.617203951 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.617211103 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.617276907 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.617316961 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.617594957 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.617605925 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:30.617634058 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:30.617640972 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.113800049 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.114434004 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.114448071 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.115031958 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.115036011 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.214340925 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.214412928 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.214473009 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.214672089 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.214693069 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.214704037 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.214709997 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.217575073 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.217608929 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.217696905 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.217854977 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.217871904 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.297944069 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.298410892 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.298479080 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.298837900 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.298851013 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.303407907 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.303986073 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.304013014 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.304465055 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.304471970 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.305541992 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.305845022 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.305859089 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.306230068 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.306238890 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.397756100 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.397842884 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.397916079 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.398194075 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.398216963 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.401762962 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.401798964 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.401885986 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.402054071 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.402065992 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.403572083 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.403635979 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.403691053 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.403837919 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.403852940 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.403863907 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.403870106 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.406085014 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.406166077 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.406217098 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.406423092 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.406467915 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.406546116 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.406649113 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.406661987 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.406697035 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.406697035 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.406702995 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.406713009 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.408929110 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.408951998 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.409013033 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.409100056 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.409107924 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.891457081 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.892152071 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.892189026 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:31.892666101 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:31.892672062 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.005841017 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.005913019 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.006035089 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.006187916 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.006232023 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.006258011 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.006272078 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.009388924 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.009450912 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.009529114 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.010158062 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.010178089 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.048979998 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.049587011 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.049628019 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.050081015 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.050097942 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.051310062 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.052082062 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.052099943 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.052604914 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.052613020 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.074652910 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.075232029 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.075263977 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.075745106 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.075764894 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.155213118 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.155291080 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.155353069 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.157891035 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.157964945 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.158020973 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.162738085 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.162766933 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.162782907 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.162789106 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.162978888 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.163009882 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.163017988 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.163023949 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.166718960 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.166763067 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.166845083 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.166887999 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.166929007 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.166976929 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.166990042 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.167006969 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.167138100 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.167143106 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.177958012 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.178026915 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.178076982 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.178204060 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.178221941 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.178236008 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.178241014 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.180892944 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.180922031 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.181019068 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.181461096 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.181478024 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.542402983 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.560436964 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.560456038 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.560868979 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.560874939 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.666147947 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.667397976 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.667418957 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.667848110 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.667853117 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.678121090 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.678193092 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.678247929 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.682075024 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.682075024 CEST	49776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.682090044 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.682097912 CEST	443	49776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.689589024 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.689642906 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.689699888 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.689987898 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.690002918 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.776307106 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.776376009 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.776460886 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.776649952 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.776675940 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.776686907 CEST	49787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.776693106 CEST	443	49787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.779242039 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.779290915 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.779375076 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.779525042 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.779541969 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.871179104 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.877454996 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.877499104 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.878181934 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.878196955 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.891681910 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.891731977 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.892270088 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.892270088 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.892294884 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.892312050 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.892767906 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.892774105 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.892925978 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.892929077 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.982101917 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.982173920 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.982223034 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.982420921 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.982451916 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.982467890 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.982474089 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.985677958 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.985712051 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:32.985778093 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.985945940 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:32.985961914 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.043617010 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.043698072 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.043747902 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.043893099 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.043893099 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.043911934 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.043922901 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.044142962 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.044213057 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.044256926 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.044406891 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.044411898 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.044423103 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.044430017 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.047244072 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.047270060 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.047308922 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.047338963 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.047367096 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.047415972 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.047492027 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.047508001 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.047648907 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.047662973 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.421956062 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.422678947 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.422738075 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.423129082 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.423136950 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.496310949 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.496936083 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.496990919 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.497380018 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.497386932 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.520754099 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.520836115 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.520896912 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.521169901 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.521194935 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.521207094 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.521214008 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.524009943 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.524054050 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.524141073 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.524265051 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.524274111 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.600100994 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.600198030 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.600330114 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.600660086 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.600686073 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.600697041 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.600703001 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.604499102 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.604537010 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.604671955 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.604907036 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.604921103 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.712769032 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.713310003 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.713341951 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.713764906 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.713777065 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.753283024 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.753355026 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.754000902 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.754036903 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.754472971 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.754478931 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.754700899 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.754723072 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.755055904 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.755069971 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.852490902 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.852552891 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.852597952 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.852869034 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.852885962 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.853140116 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.853205919 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.853245974 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.853316069 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.853334904 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.853347063 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.853353977 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.855995893 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.856029987 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.856100082 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.856245041 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.856256008 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.857089996 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.857140064 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.857208014 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.857311964 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.857322931 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.939234018 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.939300060 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.939346075 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.939537048 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.939552069 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.939564943 CEST	49793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.939569950 CEST	443	49793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.942636967 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.942668915 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:33.942914009 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.942914009 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:33.942939997 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.247733116 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.248514891 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.248563051 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.248934984 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.248941898 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.290923119 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.291512966 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.291522026 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.292018890 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.292021990 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.353190899 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.353370905 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.353579998 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.353631020 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.353631020 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.353660107 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.353673935 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.356364012 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.356405020 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.356508970 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.356666088 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.356679916 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.390372038 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.390450001 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.390678883 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.390774965 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.390774965 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.390793085 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.390801907 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.393384933 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.393443108 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.393532991 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.393665075 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.393676996 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.504872084 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.505894899 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.505906105 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.506381035 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.506386995 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.542519093 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.543087959 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.543122053 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.543562889 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.543569088 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.601711035 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.606369972 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.606390953 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.606662989 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.606669903 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.611891985 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.611969948 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.612263918 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.612263918 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.612263918 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.615430117 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.615472078 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.615669966 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.617058992 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.617072105 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.694715977 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.694789886 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.694938898 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.695115089 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.695168972 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.695214033 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.695233107 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.698637962 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.698743105 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.698916912 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.699218988 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.699255943 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.703888893 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.703958988 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.704113007 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.704293966 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.704293966 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.704308033 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.704317093 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.706325054 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.706363916 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.706482887 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.706603050 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.706623077 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:34.914072990 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:34.914094925 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.018717051 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.019520998 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.019550085 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.019987106 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.019995928 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.062078953 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.062715054 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.062748909 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.063524008 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.063534975 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.119930983 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.120002031 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.120049000 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.120239973 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.120264053 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.120280027 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.120286942 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.123672962 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.123713017 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.123788118 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.123924017 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.123936892 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.165230989 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.165304899 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.165363073 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.165555000 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.165579081 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.165591955 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.165597916 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.168720961 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.168760061 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.168858051 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.169002056 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.169014931 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.280425072 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.281219959 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.281259060 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.281718016 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.281729937 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.335396051 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.336142063 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.336174965 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.336649895 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.336656094 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.346555948 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.347047091 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.347083092 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.347496986 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.347506046 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.386326075 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.386411905 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.386517048 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.386770964 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.386794090 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.386807919 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.386815071 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.389899969 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.389940977 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.390072107 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.390244961 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.390261889 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.437423944 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.437578917 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.437745094 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.437864065 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.437889099 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.437901974 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.437911987 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.441066027 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.441138029 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.441239119 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.441457987 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.441468000 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.450361967 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.450436115 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.450498104 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.450776100 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.450800896 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.450817108 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.450824022 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.453725100 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.453775883 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.453883886 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.454050064 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.454063892 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.762994051 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.763556004 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.763573885 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.763988972 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.763994932 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.847263098 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.847944021 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.847969055 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.848309040 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.848315954 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.874762058 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.874846935 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.874923944 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.875125885 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.875149012 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.875168085 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.875174046 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.878276110 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.878320932 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:35.878415108 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.878599882 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:35.878612995 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.015567064 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.015592098 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.015655994 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.015674114 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.015919924 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.015929937 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.015950918 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.016093969 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.016125917 CEST	443	49807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.016160011 CEST	49807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.018829107 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.018871069 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.018964052 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.019211054 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.019223928 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.041641951 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.042723894 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.042723894 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.042741060 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.042753935 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.068766117 CEST	60710	53	192.168.2.5	162.159.36.2
Oct 10, 2024 15:32:36.073700905 CEST	53	60710	162.159.36.2	192.168.2.5
Oct 10, 2024 15:32:36.076859951 CEST	60710	53	192.168.2.5	162.159.36.2
Oct 10, 2024 15:32:36.081759930 CEST	53	60710	162.159.36.2	192.168.2.5
Oct 10, 2024 15:32:36.124835014 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.125317097 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.125344038 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.125756979 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.125761032 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.133219004 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.133564949 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.133583069 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.133936882 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.133943081 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.150516987 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.150592089 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.150954962 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.150954962 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.152745962 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.152761936 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.153889894 CEST	60711	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.153932095 CEST	443	60711	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.153995991 CEST	60711	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.154126883 CEST	60711	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.154135942 CEST	443	60711	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.227137089 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.227165937 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.227224112 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.227293968 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.227327108 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.227526903 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.227549076 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.227585077 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.227591038 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.234378099 CEST	60712	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.234432936 CEST	443	60712	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.234559059 CEST	60712	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.235171080 CEST	60712	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.235181093 CEST	443	60712	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.247661114 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.247726917 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.247776031 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.248003960 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.248025894 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.248039961 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.248045921 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.251038074 CEST	60713	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.251077890 CEST	443	60713	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.251135111 CEST	60713	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.251291990 CEST	60713	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.251301050 CEST	443	60713	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.581496000 CEST	60710	53	192.168.2.5	162.159.36.2
Oct 10, 2024 15:32:36.581665993 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.582557917 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.582571983 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.583276987 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.583283901 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.586745024 CEST	53	60710	162.159.36.2	192.168.2.5
Oct 10, 2024 15:32:36.586797953 CEST	60710	53	192.168.2.5	162.159.36.2
Oct 10, 2024 15:32:36.597136974 CEST	60714	443	192.168.2.5	13.85.23.206
Oct 10, 2024 15:32:36.597176075 CEST	443	60714	13.85.23.206	192.168.2.5
Oct 10, 2024 15:32:36.597251892 CEST	60714	443	192.168.2.5	13.85.23.206
Oct 10, 2024 15:32:36.597615957 CEST	60714	443	192.168.2.5	13.85.23.206
Oct 10, 2024 15:32:36.597629070 CEST	443	60714	13.85.23.206	192.168.2.5
Oct 10, 2024 15:32:36.684514046 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.684537888 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.684644938 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.684686899 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.684686899 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.688174963 CEST	60715	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.688210964 CEST	443	60715	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.688230038 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.688230991 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.688250065 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.688261986 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.688272953 CEST	60715	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.688935995 CEST	60715	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.688945055 CEST	443	60715	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.751893997 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.752445936 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.752469063 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.752897978 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.752904892 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.860306025 CEST	443	60711	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.900096893 CEST	60711	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.901791096 CEST	60711	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.901803970 CEST	443	60711	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.907321930 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.907349110 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.907426119 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.907442093 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.907495975 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.907535076 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.918708086 CEST	60711	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.918724060 CEST	443	60711	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.919274092 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.919295073 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.919307947 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.919313908 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.922126055 CEST	60716	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.922168016 CEST	443	60716	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.922225952 CEST	60716	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.922354937 CEST	60716	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.922365904 CEST	443	60716	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.956681013 CEST	443	60713	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.956862926 CEST	443	60712	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:36.999047995 CEST	60712	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:36.999052048 CEST	60713	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.022620916 CEST	443	60711	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.022691965 CEST	443	60711	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.022748947 CEST	60711	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.069176912 CEST	60713	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.069200993 CEST	443	60713	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.070379972 CEST	60713	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.070386887 CEST	443	60713	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.071676970 CEST	60712	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.071695089 CEST	443	60712	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.072639942 CEST	60712	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.072648048 CEST	443	60712	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.075440884 CEST	60711	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.075484037 CEST	443	60711	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.075505018 CEST	60711	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.075512886 CEST	443	60711	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.112776995 CEST	60717	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.112828970 CEST	443	60717	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.112896919 CEST	60717	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.121619940 CEST	60717	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.121633053 CEST	443	60717	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.180017948 CEST	443	60713	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.180341005 CEST	443	60713	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.180408001 CEST	60713	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.181123018 CEST	60713	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.181148052 CEST	443	60713	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.181159019 CEST	60713	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.181164980 CEST	443	60713	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.185740948 CEST	60718	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.185789108 CEST	443	60718	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.185847998 CEST	60718	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.185986996 CEST	60718	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.185998917 CEST	443	60718	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.190001965 CEST	443	60712	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.190063953 CEST	443	60712	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.190114975 CEST	60712	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.190284014 CEST	60712	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.190303087 CEST	443	60712	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.190318108 CEST	60712	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.190324068 CEST	443	60712	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.192761898 CEST	60719	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.192790985 CEST	443	60719	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.192859888 CEST	60719	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.192969084 CEST	60719	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.192985058 CEST	443	60719	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.310561895 CEST	443	60714	13.85.23.206	192.168.2.5
Oct 10, 2024 15:32:37.310693026 CEST	60714	443	192.168.2.5	13.85.23.206
Oct 10, 2024 15:32:37.322519064 CEST	60714	443	192.168.2.5	13.85.23.206
Oct 10, 2024 15:32:37.322547913 CEST	443	60714	13.85.23.206	192.168.2.5
Oct 10, 2024 15:32:37.322937965 CEST	443	60714	13.85.23.206	192.168.2.5
Oct 10, 2024 15:32:37.331830025 CEST	60714	443	192.168.2.5	13.85.23.206
Oct 10, 2024 15:32:37.364139080 CEST	443	60715	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.364675045 CEST	60715	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.364705086 CEST	443	60715	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.365183115 CEST	60715	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.365197897 CEST	443	60715	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.375402927 CEST	443	60714	13.85.23.206	192.168.2.5
Oct 10, 2024 15:32:37.465367079 CEST	443	60715	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.465436935 CEST	443	60715	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.465513945 CEST	60715	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.465697050 CEST	60715	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.465718985 CEST	443	60715	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.465719938 CEST	60715	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.465728998 CEST	443	60715	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.468456030 CEST	60720	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.468492031 CEST	443	60720	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.468559027 CEST	60720	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.468698025 CEST	60720	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.468714952 CEST	443	60720	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.476851940 CEST	443	60714	13.85.23.206	192.168.2.5
Oct 10, 2024 15:32:37.477046967 CEST	443	60714	13.85.23.206	192.168.2.5
Oct 10, 2024 15:32:37.477108002 CEST	60714	443	192.168.2.5	13.85.23.206
Oct 10, 2024 15:32:37.477459908 CEST	60714	443	192.168.2.5	13.85.23.206
Oct 10, 2024 15:32:37.477477074 CEST	443	60714	13.85.23.206	192.168.2.5
Oct 10, 2024 15:32:37.477502108 CEST	60714	443	192.168.2.5	13.85.23.206
Oct 10, 2024 15:32:37.477508068 CEST	443	60714	13.85.23.206	192.168.2.5
Oct 10, 2024 15:32:37.512065887 CEST	60721	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:37.512131929 CEST	443	60721	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:37.512259007 CEST	60721	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:37.512630939 CEST	60721	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:37.512646914 CEST	443	60721	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:37.557281017 CEST	443	60716	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.558010101 CEST	60716	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.558047056 CEST	443	60716	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.558578014 CEST	60716	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.558599949 CEST	443	60716	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.661851883 CEST	443	60716	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.661936998 CEST	443	60716	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.662054062 CEST	60716	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.662322998 CEST	60716	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.662341118 CEST	443	60716	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.662355900 CEST	60716	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.662362099 CEST	443	60716	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.665525913 CEST	60722	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.665579081 CEST	443	60722	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.665652037 CEST	60722	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.665796995 CEST	60722	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.665807962 CEST	443	60722	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.790194988 CEST	443	60717	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.790618896 CEST	60717	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.790642977 CEST	443	60717	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.791095018 CEST	60717	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.791100979 CEST	443	60717	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.852751970 CEST	443	60719	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.853406906 CEST	60719	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.853439093 CEST	443	60719	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.853898048 CEST	60719	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.853904009 CEST	443	60719	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.854588032 CEST	443	60718	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.854846001 CEST	60718	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.854876995 CEST	443	60718	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.855179071 CEST	60718	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.855184078 CEST	443	60718	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.896434069 CEST	443	60717	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.896506071 CEST	443	60717	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.896742105 CEST	60717	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.896859884 CEST	60717	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.896883011 CEST	443	60717	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.896895885 CEST	60717	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.896903038 CEST	443	60717	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.900127888 CEST	60723	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.900173903 CEST	443	60723	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.900281906 CEST	60723	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.900460958 CEST	60723	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.900473118 CEST	443	60723	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.955549955 CEST	443	60719	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.955658913 CEST	443	60719	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.955758095 CEST	60719	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.955984116 CEST	60719	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.956011057 CEST	443	60719	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.956027031 CEST	60719	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.956032991 CEST	443	60719	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.959142923 CEST	60724	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.959193945 CEST	443	60724	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.959305048 CEST	60724	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.959477901 CEST	60724	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.959490061 CEST	443	60724	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.961875916 CEST	443	60718	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.961936951 CEST	443	60718	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.961980104 CEST	60718	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.962361097 CEST	60718	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.962383032 CEST	443	60718	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.962397099 CEST	60718	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.962404966 CEST	443	60718	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.965969086 CEST	60725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.966016054 CEST	443	60725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:37.966087103 CEST	60725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.966288090 CEST	60725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:37.966298103 CEST	443	60725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.104306936 CEST	443	60721	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:38.104420900 CEST	60721	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:38.105880976 CEST	60721	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:38.105904102 CEST	443	60721	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:38.106128931 CEST	443	60721	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:38.107137918 CEST	60721	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:38.134572029 CEST	443	60720	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.135415077 CEST	60720	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.135442019 CEST	443	60720	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.135682106 CEST	60720	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.135689974 CEST	443	60720	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.151418924 CEST	443	60721	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:38.220899105 CEST	443	60721	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:38.220993996 CEST	443	60721	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:38.221092939 CEST	60721	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:38.221240044 CEST	60721	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:38.221261978 CEST	443	60721	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:38.221275091 CEST	60721	443	192.168.2.5	20.12.23.50
Oct 10, 2024 15:32:38.221281052 CEST	443	60721	20.12.23.50	192.168.2.5
Oct 10, 2024 15:32:38.252563953 CEST	443	60720	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.252635956 CEST	443	60720	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.252758980 CEST	60720	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.252914906 CEST	60720	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.252934933 CEST	443	60720	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.252950907 CEST	60720	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.252955914 CEST	443	60720	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.255832911 CEST	60726	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.255884886 CEST	443	60726	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.255965948 CEST	60726	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.256117105 CEST	60726	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.256129980 CEST	443	60726	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.299617052 CEST	443	60722	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.302967072 CEST	60722	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.303013086 CEST	443	60722	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.303431034 CEST	60722	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.303436995 CEST	443	60722	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.399331093 CEST	443	60722	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.399451017 CEST	443	60722	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.399507046 CEST	60722	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.400139093 CEST	60722	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.400166035 CEST	443	60722	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.400177956 CEST	60722	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.400183916 CEST	443	60722	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.402832985 CEST	60727	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.402875900 CEST	443	60727	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.402952909 CEST	60727	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.403122902 CEST	60727	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.403137922 CEST	443	60727	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.562402010 CEST	443	60723	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.564795971 CEST	60723	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.564824104 CEST	443	60723	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.564973116 CEST	60723	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.564977884 CEST	443	60723	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.614887953 CEST	443	60725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.615587950 CEST	60725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.615624905 CEST	443	60725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.615967035 CEST	60725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.615972042 CEST	443	60725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.618690014 CEST	443	60724	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.618980885 CEST	60724	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.619020939 CEST	443	60724	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.619329929 CEST	60724	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.619339943 CEST	443	60724	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.662857056 CEST	443	60723	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.662890911 CEST	443	60723	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.662945986 CEST	443	60723	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.663014889 CEST	60723	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.663227081 CEST	60723	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.663285017 CEST	60723	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.663305998 CEST	443	60723	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.663343906 CEST	60723	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.663351059 CEST	443	60723	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.666906118 CEST	60728	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.666966915 CEST	443	60728	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.667041063 CEST	60728	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.667176962 CEST	60728	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.667190075 CEST	443	60728	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.713711977 CEST	443	60725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.713936090 CEST	443	60725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.713999987 CEST	443	60725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.714055061 CEST	60725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.714117050 CEST	60725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.720742941 CEST	60725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.720767975 CEST	443	60725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.720801115 CEST	60725	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.720807076 CEST	443	60725	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.723484039 CEST	60729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.723535061 CEST	443	60729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.723611116 CEST	60729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.723800898 CEST	60729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.723813057 CEST	443	60729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.734884977 CEST	443	60724	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.734961987 CEST	443	60724	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.735095978 CEST	60724	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.735443115 CEST	60724	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.735444069 CEST	60724	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.735464096 CEST	443	60724	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.735475063 CEST	443	60724	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.738065004 CEST	60730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.738109112 CEST	443	60730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.738198996 CEST	60730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.738493919 CEST	60730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.738506079 CEST	443	60730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.910269022 CEST	443	60726	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.913281918 CEST	60726	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.913319111 CEST	443	60726	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:38.913825989 CEST	60726	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:38.913835049 CEST	443	60726	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.010464907 CEST	443	60726	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.010725975 CEST	443	60726	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.010793924 CEST	60726	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.013411999 CEST	60726	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.013433933 CEST	443	60726	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.013443947 CEST	60726	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.013448954 CEST	443	60726	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.019493103 CEST	60731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.019537926 CEST	443	60731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.019598007 CEST	60731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.019726992 CEST	60731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.019738913 CEST	443	60731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.041579962 CEST	443	60727	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.042263031 CEST	60727	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.042279005 CEST	443	60727	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.043021917 CEST	60727	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.043028116 CEST	443	60727	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.141208887 CEST	443	60727	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.141262054 CEST	443	60727	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.141360044 CEST	60727	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.141524076 CEST	60727	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.141545057 CEST	443	60727	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.141556978 CEST	60727	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.141563892 CEST	443	60727	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.145896912 CEST	60732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.145952940 CEST	443	60732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.146080017 CEST	60732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.146424055 CEST	60732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.146435976 CEST	443	60732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.276716948 CEST	60733	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:39.276765108 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:39.277053118 CEST	60733	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:39.277779102 CEST	60733	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:39.277802944 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:39.356775045 CEST	443	60728	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.358881950 CEST	60728	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.358903885 CEST	443	60728	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.359503984 CEST	60728	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.359510899 CEST	443	60728	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.459498882 CEST	443	60729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.460207939 CEST	60729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.460232973 CEST	443	60729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.460656881 CEST	60729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.460661888 CEST	443	60729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.477340937 CEST	443	60730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.479017973 CEST	60730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.479033947 CEST	443	60730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.479401112 CEST	60730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.479404926 CEST	443	60730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.536004066 CEST	443	60728	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.536092997 CEST	443	60728	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.536315918 CEST	60728	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.537350893 CEST	60728	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.537377119 CEST	443	60728	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.537389994 CEST	60728	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.537396908 CEST	443	60728	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.575577974 CEST	60734	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.575643063 CEST	443	60734	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.575844049 CEST	60734	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.582072020 CEST	60734	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.582099915 CEST	443	60734	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.610292912 CEST	443	60730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.610373020 CEST	443	60730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.610506058 CEST	60730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.611422062 CEST	60730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.611422062 CEST	60730	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.611450911 CEST	443	60730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.611465931 CEST	443	60730	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.614020109 CEST	60735	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.614073038 CEST	443	60735	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.614480019 CEST	60735	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.614737988 CEST	60735	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.614749908 CEST	443	60735	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.628115892 CEST	443	60729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.628139973 CEST	443	60729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.628186941 CEST	443	60729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.628237009 CEST	60729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.628443003 CEST	60729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.665616989 CEST	60729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.665648937 CEST	443	60729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.665780067 CEST	60729	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.665786982 CEST	443	60729	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.668677092 CEST	60736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.668730974 CEST	443	60736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.668945074 CEST	60736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.669145107 CEST	60736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.669154882 CEST	443	60736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.842385054 CEST	443	60731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.843076944 CEST	60731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.843118906 CEST	443	60731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.843647003 CEST	60731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.843653917 CEST	443	60731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.905858040 CEST	443	60732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.906490088 CEST	60732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.906517029 CEST	443	60732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.906960011 CEST	60732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.906965017 CEST	443	60732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.942737103 CEST	443	60731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.942817926 CEST	443	60731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.942903996 CEST	60731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.943273067 CEST	60731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.943273067 CEST	60731	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.943294048 CEST	443	60731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.943305969 CEST	443	60731	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.946536064 CEST	60737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.946582079 CEST	443	60737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:39.946675062 CEST	60737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.946876049 CEST	60737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:39.946887016 CEST	443	60737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.010190010 CEST	443	60732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.010251045 CEST	443	60732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.010310888 CEST	60732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.010565996 CEST	60732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.010601044 CEST	443	60732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.010622025 CEST	60732	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.010641098 CEST	443	60732	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.013691902 CEST	60738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.013732910 CEST	443	60738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.013881922 CEST	60738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.014070034 CEST	60738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.014081955 CEST	443	60738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.032396078 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.033987999 CEST	60733	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:40.033987999 CEST	60733	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:40.034013987 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.034267902 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.035312891 CEST	60733	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:40.079394102 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.231777906 CEST	443	60734	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.232331038 CEST	60734	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.232353926 CEST	443	60734	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.232801914 CEST	60734	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.232806921 CEST	443	60734	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.283236027 CEST	443	60735	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.284075022 CEST	60735	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.284106016 CEST	443	60735	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.284558058 CEST	60735	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.284564972 CEST	443	60735	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.309237003 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.309258938 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.309272051 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.309351921 CEST	60733	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:40.309381962 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.309946060 CEST	60733	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:40.310002089 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.310066938 CEST	60733	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:40.310077906 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.310132027 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.310189009 CEST	60733	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:40.313306093 CEST	60733	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:40.313323021 CEST	443	60733	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.335963964 CEST	443	60734	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.336256027 CEST	443	60734	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.336306095 CEST	443	60734	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.336308956 CEST	60734	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.336360931 CEST	60734	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.336643934 CEST	60734	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.336661100 CEST	443	60734	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.336672068 CEST	60734	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.336678028 CEST	443	60734	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.341962099 CEST	60739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.342005968 CEST	443	60739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.342077971 CEST	60739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.342318058 CEST	60739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.342329979 CEST	443	60739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.343611002 CEST	443	60736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.344162941 CEST	60736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.344172001 CEST	443	60736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.344619989 CEST	60736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.344625950 CEST	443	60736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.387006998 CEST	443	60735	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.387456894 CEST	443	60735	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.387528896 CEST	60735	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.398552895 CEST	60735	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.398596048 CEST	443	60735	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.398612022 CEST	60735	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.398619890 CEST	443	60735	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.414460897 CEST	60740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.414519072 CEST	443	60740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.414592028 CEST	60740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.416786909 CEST	60740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.416811943 CEST	443	60740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.449193954 CEST	443	60736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.449235916 CEST	443	60736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.449285984 CEST	443	60736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.449321985 CEST	60736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.449369907 CEST	60736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.449569941 CEST	60736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.449593067 CEST	443	60736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.449609041 CEST	60736	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.449615002 CEST	443	60736	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.452336073 CEST	60741	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.452373981 CEST	443	60741	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.452436924 CEST	60741	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.452567101 CEST	60741	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.452575922 CEST	443	60741	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.463808060 CEST	60742	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:40.463839054 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.464035034 CEST	60742	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:40.464348078 CEST	60742	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:40.464360952 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:40.611917973 CEST	443	60737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.612735033 CEST	60737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.612761021 CEST	443	60737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.613226891 CEST	60737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.613233089 CEST	443	60737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.877751112 CEST	443	60737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.877804041 CEST	443	60737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.877928019 CEST	60737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.878170967 CEST	60737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.878191948 CEST	443	60737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.878206015 CEST	60737	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.878213882 CEST	443	60737	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.879365921 CEST	443	60738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.880918980 CEST	60743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.880969048 CEST	443	60743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.881263971 CEST	60738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.881278992 CEST	443	60738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.881302118 CEST	60743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.881416082 CEST	60743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.881428003 CEST	443	60743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.881786108 CEST	60738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.881789923 CEST	443	60738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.982933998 CEST	443	60738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.983632088 CEST	443	60738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.984321117 CEST	60738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.984359026 CEST	60738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.984376907 CEST	443	60738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.984390974 CEST	60738	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.984396935 CEST	443	60738	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.987154961 CEST	60744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.987189054 CEST	443	60744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:40.987344027 CEST	60744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.987499952 CEST	60744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:40.987513065 CEST	443	60744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.017148972 CEST	443	60740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.017877102 CEST	60740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.017911911 CEST	443	60740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.018371105 CEST	60740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.018382072 CEST	443	60740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.071990013 CEST	443	60739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.072462082 CEST	60739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.072479963 CEST	443	60739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.073131084 CEST	60739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.073137045 CEST	443	60739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.118273020 CEST	443	60740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.118314028 CEST	443	60740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.118366003 CEST	443	60740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.118379116 CEST	60740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.118417978 CEST	60740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.118601084 CEST	60740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.118622065 CEST	443	60740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.118635893 CEST	60740	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.118643045 CEST	443	60740	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.121234894 CEST	60745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.121278048 CEST	443	60745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.121439934 CEST	60745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.121587038 CEST	60745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.121598005 CEST	443	60745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.132960081 CEST	443	60741	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.133552074 CEST	60741	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.133584023 CEST	443	60741	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.134023905 CEST	60741	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.134031057 CEST	443	60741	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.159342051 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.159431934 CEST	60742	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:41.160737038 CEST	60742	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:41.160765886 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.161084890 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.162138939 CEST	60742	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:41.203056097 CEST	443	60739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.203124046 CEST	443	60739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.203183889 CEST	60739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.203373909 CEST	60739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.203402996 CEST	443	60739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.203423977 CEST	60739	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.203430891 CEST	443	60739	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.206177950 CEST	60746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.206228971 CEST	443	60746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.206408978 CEST	60746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.206578970 CEST	60746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.206589937 CEST	443	60746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.207398891 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.235986948 CEST	443	60741	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.236219883 CEST	443	60741	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.236371994 CEST	60741	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.236406088 CEST	60741	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.236423016 CEST	443	60741	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.236434937 CEST	60741	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.236439943 CEST	443	60741	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.242423058 CEST	60747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.242468119 CEST	443	60747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.243424892 CEST	60747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.243424892 CEST	60747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.243455887 CEST	443	60747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.455365896 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.455404043 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.455420017 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.455538988 CEST	60742	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:41.455562115 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.455624104 CEST	60742	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:41.456414938 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.456464052 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.456501007 CEST	60742	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:41.456517935 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.456532955 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.456532955 CEST	60742	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:41.456617117 CEST	60742	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:41.457962036 CEST	60742	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:41.457983971 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.458003998 CEST	60742	443	192.168.2.5	20.109.210.53
Oct 10, 2024 15:32:41.458014965 CEST	443	60742	20.109.210.53	192.168.2.5
Oct 10, 2024 15:32:41.575581074 CEST	443	60743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.576103926 CEST	60743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.576143980 CEST	443	60743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.576596975 CEST	60743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.576605082 CEST	443	60743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.668308020 CEST	443	60744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.668752909 CEST	60744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.668786049 CEST	443	60744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.669256926 CEST	60744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.669271946 CEST	443	60744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.679946899 CEST	443	60743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.680044889 CEST	443	60743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.680115938 CEST	60743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.680356979 CEST	60743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.680381060 CEST	443	60743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.680399895 CEST	60743	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.680406094 CEST	443	60743	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.685843945 CEST	60748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.685885906 CEST	443	60748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.686125994 CEST	60748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.686288118 CEST	60748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.686300039 CEST	443	60748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.767705917 CEST	443	60744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.767780066 CEST	443	60744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.768099070 CEST	60744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.770975113 CEST	60744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.770975113 CEST	60744	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.770993948 CEST	443	60744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.771011114 CEST	443	60744	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.773865938 CEST	60749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.773919106 CEST	443	60749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.774127007 CEST	60749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.774363995 CEST	60749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.774379015 CEST	443	60749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.832694054 CEST	443	60745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.833358049 CEST	60745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.833389044 CEST	443	60745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.833844900 CEST	60745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.833848953 CEST	443	60745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.851208925 CEST	443	60746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.851768017 CEST	60746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.851810932 CEST	443	60746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.852056980 CEST	60746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.852063894 CEST	443	60746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.939526081 CEST	443	60745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.939577103 CEST	443	60745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.939625025 CEST	443	60745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.939651012 CEST	60745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.939688921 CEST	60745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.939928055 CEST	60745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.939949036 CEST	443	60745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.939960003 CEST	60745	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.939965963 CEST	443	60745	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.942692995 CEST	443	60747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.942998886 CEST	60750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.943043947 CEST	443	60750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.943399906 CEST	60747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.943425894 CEST	443	60747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.943438053 CEST	60750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.943566084 CEST	60750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.943578959 CEST	443	60750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.943893909 CEST	60747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.943900108 CEST	443	60747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.951244116 CEST	443	60746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.951392889 CEST	443	60746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.951467037 CEST	60746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.951493979 CEST	60746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.951503992 CEST	443	60746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.951517105 CEST	60746	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.951523066 CEST	443	60746	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.953788042 CEST	60751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.953834057 CEST	443	60751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:41.953911066 CEST	60751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.954061031 CEST	60751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:41.954077005 CEST	443	60751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.047624111 CEST	443	60747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.047699928 CEST	443	60747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.047826052 CEST	60747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.048182964 CEST	60747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.048182964 CEST	60747	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.048206091 CEST	443	60747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.048238039 CEST	443	60747	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.051121950 CEST	60752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.051165104 CEST	443	60752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.051240921 CEST	60752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.051580906 CEST	60752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.051600933 CEST	443	60752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.385083914 CEST	443	60748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.385576010 CEST	60748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.385591984 CEST	443	60748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.386025906 CEST	60748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.386029959 CEST	443	60748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.488466978 CEST	443	60748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.488698959 CEST	443	60748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.488801956 CEST	60748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.488833904 CEST	60748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.488850117 CEST	443	60748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.488858938 CEST	60748	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.488863945 CEST	443	60748	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.491806030 CEST	60753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.491854906 CEST	443	60753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.491935015 CEST	60753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.492114067 CEST	60753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.492126942 CEST	443	60753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.588768959 CEST	443	60750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.589260101 CEST	60750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.589291096 CEST	443	60750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.589682102 CEST	60750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.589685917 CEST	443	60750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.640835047 CEST	443	60751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.641305923 CEST	60751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.641328096 CEST	443	60751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.641731024 CEST	60751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.641738892 CEST	443	60751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.708539009 CEST	443	60750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.708800077 CEST	443	60750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.708894968 CEST	60750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.709099054 CEST	60750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.709120989 CEST	443	60750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.709131956 CEST	60750	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.709137917 CEST	443	60750	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.712698936 CEST	60754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.712733984 CEST	443	60754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.713000059 CEST	60754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.713140965 CEST	60754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.713152885 CEST	443	60754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.734296083 CEST	443	60752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.734874010 CEST	60752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.734894991 CEST	443	60752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.735409975 CEST	60752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.735414028 CEST	443	60752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.757996082 CEST	443	60751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.758614063 CEST	443	60751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.762495995 CEST	60751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.762537003 CEST	60751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.762558937 CEST	443	60751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.762572050 CEST	60751	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.762578011 CEST	443	60751	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.765244007 CEST	60755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.765285015 CEST	443	60755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.765484095 CEST	60755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.765484095 CEST	60755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.765513897 CEST	443	60755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.838253975 CEST	443	60752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.838320971 CEST	443	60752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.838435888 CEST	60752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.838598013 CEST	60752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.838614941 CEST	443	60752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.839401007 CEST	60752	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.839406967 CEST	443	60752	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.841558933 CEST	60756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.841597080 CEST	443	60756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:42.841780901 CEST	60756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.841911077 CEST	60756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:42.841928959 CEST	443	60756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.163814068 CEST	443	60753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.167022943 CEST	60753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.167061090 CEST	443	60753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.167485952 CEST	60753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.167496920 CEST	443	60753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.262953997 CEST	443	60753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.263168097 CEST	443	60753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.263230085 CEST	443	60753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.263269901 CEST	60753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.263307095 CEST	60753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.263362885 CEST	60753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.263400078 CEST	443	60753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.263421059 CEST	60753	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.263426065 CEST	443	60753	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.265918970 CEST	60757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.265963078 CEST	443	60757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.266037941 CEST	60757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.266161919 CEST	60757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.266175032 CEST	443	60757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.372540951 CEST	443	60754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.373318911 CEST	60754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.373363972 CEST	443	60754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.373835087 CEST	60754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.373842001 CEST	443	60754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.446994066 CEST	443	60755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.447490931 CEST	60755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.447524071 CEST	443	60755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.447976112 CEST	60755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.447982073 CEST	443	60755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.472870111 CEST	443	60754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.473037004 CEST	443	60754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.473155975 CEST	60754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.473196983 CEST	60754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.473218918 CEST	443	60754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.473229885 CEST	60754	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.473237038 CEST	443	60754	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.475883007 CEST	60758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.475927114 CEST	443	60758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.475996017 CEST	60758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.476129055 CEST	60758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.476140022 CEST	443	60758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.476303101 CEST	443	60756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.476643085 CEST	60756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.476680994 CEST	443	60756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.477046967 CEST	60756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.477057934 CEST	443	60756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.548831940 CEST	443	60755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.548975945 CEST	443	60755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.549021006 CEST	443	60755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.549032927 CEST	60755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.549243927 CEST	60755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.549264908 CEST	443	60755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.549289942 CEST	60755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.549297094 CEST	443	60755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.549304962 CEST	60755	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.549308062 CEST	443	60755	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.552083969 CEST	60759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.552129984 CEST	443	60759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.552227020 CEST	60759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.552407980 CEST	60759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.552423000 CEST	443	60759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.575315952 CEST	443	60756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.575628042 CEST	443	60756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.575684071 CEST	60756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.575716972 CEST	60756	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.575728893 CEST	443	60756	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.578574896 CEST	60760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.578615904 CEST	443	60760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.578682899 CEST	60760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.578860044 CEST	60760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.578871012 CEST	443	60760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.607907057 CEST	443	60749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.608381987 CEST	60749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.608402967 CEST	443	60749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.608855963 CEST	60749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.608860970 CEST	443	60749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.616245031 CEST	443	49741	23.1.237.91	192.168.2.5
Oct 10, 2024 15:32:43.616312981 CEST	49741	443	192.168.2.5	23.1.237.91
Oct 10, 2024 15:32:43.716445923 CEST	443	60749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.716470003 CEST	443	60749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.716519117 CEST	443	60749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.716582060 CEST	60749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.716636896 CEST	60749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.717094898 CEST	60749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.717128992 CEST	443	60749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.717142105 CEST	60749	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.717148066 CEST	443	60749	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.719810963 CEST	60761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.719856024 CEST	443	60761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:43.719929934 CEST	60761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.720164061 CEST	60761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:43.720180988 CEST	443	60761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.140300035 CEST	443	60757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.140747070 CEST	60757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.140759945 CEST	443	60757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.141232014 CEST	60757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.141237974 CEST	443	60757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.246954918 CEST	443	60757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.247071028 CEST	443	60757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.247137070 CEST	443	60757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.247272015 CEST	60757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.247747898 CEST	60757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.247747898 CEST	60757	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.247770071 CEST	443	60757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.247781992 CEST	443	60757	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.251224995 CEST	60762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.251270056 CEST	443	60762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.251357079 CEST	60762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.251555920 CEST	60762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.251566887 CEST	443	60762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.333702087 CEST	443	60758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.334270954 CEST	60758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.334290981 CEST	443	60758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.334724903 CEST	60758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.334729910 CEST	443	60758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.337037086 CEST	443	60760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.337356091 CEST	60760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.337388992 CEST	443	60760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.337760925 CEST	60760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.337765932 CEST	443	60760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.344322920 CEST	443	60759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.344671965 CEST	60759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.344696999 CEST	443	60759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.345036983 CEST	60759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.345042944 CEST	443	60759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.397619009 CEST	443	60761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.398088932 CEST	60761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.398123026 CEST	443	60761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.398536921 CEST	60761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.398542881 CEST	443	60761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.433105946 CEST	443	60758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.433355093 CEST	443	60758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.433419943 CEST	60758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.433464050 CEST	60758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.433485031 CEST	443	60758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.433492899 CEST	60758	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.433497906 CEST	443	60758	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.436167955 CEST	60763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.436211109 CEST	443	60763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.436288118 CEST	60763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.436562061 CEST	60763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.436573982 CEST	443	60763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.437676907 CEST	443	60760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.437757015 CEST	443	60760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.437800884 CEST	60760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.437858105 CEST	60760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.437866926 CEST	443	60760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.437876940 CEST	60760	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.437880993 CEST	443	60760	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.439913034 CEST	60764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.440005064 CEST	443	60764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.440087080 CEST	60764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.440201044 CEST	60764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.440233946 CEST	443	60764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.450680971 CEST	443	60759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.450699091 CEST	443	60759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.450737953 CEST	443	60759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.450808048 CEST	60759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.450975895 CEST	60759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.450992107 CEST	443	60759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.451001883 CEST	60759	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.451006889 CEST	443	60759	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.453548908 CEST	60765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.453586102 CEST	443	60765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.453739882 CEST	60765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.453901052 CEST	60765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.453915119 CEST	443	60765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.505608082 CEST	443	60761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.505637884 CEST	443	60761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.505691051 CEST	443	60761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.505760908 CEST	60761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.505789042 CEST	60761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.505997896 CEST	60761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.506016970 CEST	443	60761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.506032944 CEST	60761	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.506038904 CEST	443	60761	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.510449886 CEST	60766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.510476112 CEST	443	60766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:44.510823011 CEST	60766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.510823011 CEST	60766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:44.510852098 CEST	443	60766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.010591030 CEST	443	60762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.011063099 CEST	60762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.011091948 CEST	443	60762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.011533022 CEST	60762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.011539936 CEST	443	60762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.121067047 CEST	443	60764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.121700048 CEST	60764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.121735096 CEST	443	60764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.122065067 CEST	60764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.122071981 CEST	443	60764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.122400999 CEST	443	60765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.122648001 CEST	60765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.122661114 CEST	443	60765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.122971058 CEST	60765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.122975111 CEST	443	60765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.123277903 CEST	443	60762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.124249935 CEST	443	60762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.124311924 CEST	60762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.124346972 CEST	60762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.124365091 CEST	443	60762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.124377012 CEST	60762	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.124382019 CEST	443	60762	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.127087116 CEST	60767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.127120972 CEST	443	60767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.127207994 CEST	60767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.127360106 CEST	60767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.127372980 CEST	443	60767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.140268087 CEST	443	60763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.140614986 CEST	60763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.140640974 CEST	443	60763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.141026974 CEST	60763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.141033888 CEST	443	60763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.186727047 CEST	443	60766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.187231064 CEST	60766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.187242031 CEST	443	60766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.187637091 CEST	60766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.187642097 CEST	443	60766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.220572948 CEST	443	60764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.220638990 CEST	443	60764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.220845938 CEST	60764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.220998049 CEST	60764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.221024036 CEST	443	60764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.221036911 CEST	60764	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.221044064 CEST	443	60764	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.221445084 CEST	443	60765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.221472979 CEST	443	60765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.221517086 CEST	443	60765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.221534014 CEST	60765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.221560955 CEST	60765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.221678972 CEST	60765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.221698999 CEST	443	60765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.221707106 CEST	60765	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.221712112 CEST	443	60765	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.224251986 CEST	60768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.224276066 CEST	443	60768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.224334002 CEST	60769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.224351883 CEST	60768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.224358082 CEST	443	60769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.224477053 CEST	60768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.224489927 CEST	443	60768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.224508047 CEST	60769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.224670887 CEST	60769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.224680901 CEST	443	60769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.243037939 CEST	443	60763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.243633032 CEST	443	60763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.243705988 CEST	60763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.243761063 CEST	60763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.243782043 CEST	443	60763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.243793011 CEST	60763	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.243798971 CEST	443	60763	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.246256113 CEST	60770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.246278048 CEST	443	60770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.246351957 CEST	60770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.246479034 CEST	60770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.246499062 CEST	443	60770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.284434080 CEST	443	60766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.284543037 CEST	443	60766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.284696102 CEST	60766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.284732103 CEST	60766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.284749985 CEST	443	60766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.284768105 CEST	60766	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.284773111 CEST	443	60766	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.287378073 CEST	60771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.287420988 CEST	443	60771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.287514925 CEST	60771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.287667036 CEST	60771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.287676096 CEST	443	60771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.909794092 CEST	443	60768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.910819054 CEST	60768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.910845995 CEST	443	60768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.912616968 CEST	60768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.912623882 CEST	443	60768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.959350109 CEST	443	60769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.960916996 CEST	60769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.960937023 CEST	443	60769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.961355925 CEST	60769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.961365938 CEST	443	60769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.968220949 CEST	443	60770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.968597889 CEST	60770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.968614101 CEST	443	60770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.969243050 CEST	60770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.969254017 CEST	443	60770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.977231026 CEST	443	60771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.978718042 CEST	60771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.978744984 CEST	443	60771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:45.979091883 CEST	60771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:45.979098082 CEST	443	60771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.015719891 CEST	443	60768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.015966892 CEST	443	60768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.016027927 CEST	60768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.016076088 CEST	60768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.016098976 CEST	443	60768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.016113043 CEST	60768	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.016118050 CEST	443	60768	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.018712997 CEST	60772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.018752098 CEST	443	60772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.018837929 CEST	60772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.018980026 CEST	60772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.018992901 CEST	443	60772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.061264992 CEST	443	60769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.061458111 CEST	443	60769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.061511993 CEST	60769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.061585903 CEST	60769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.061585903 CEST	60769	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.061605930 CEST	443	60769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.061614037 CEST	443	60769	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.064217091 CEST	60773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.064280033 CEST	443	60773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.064332008 CEST	60773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.064460993 CEST	60773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.064470053 CEST	443	60773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.068639994 CEST	443	60770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.068862915 CEST	443	60770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.068986893 CEST	60770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.068986893 CEST	60770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.069015980 CEST	60770	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.069032907 CEST	443	60770	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.071346045 CEST	60774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.071393013 CEST	443	60774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.071664095 CEST	60774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.071789980 CEST	60774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.071808100 CEST	443	60774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.097495079 CEST	443	60771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.097585917 CEST	443	60771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.097644091 CEST	60771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.097676992 CEST	443	60771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.097702980 CEST	443	60771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.097776890 CEST	60771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.097879887 CEST	60771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.097908020 CEST	443	60771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.097908974 CEST	60771	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.097914934 CEST	443	60771	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.100331068 CEST	60775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.100380898 CEST	443	60775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.100539923 CEST	60775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.100696087 CEST	60775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.100711107 CEST	443	60775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.590681076 CEST	443	60767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.591245890 CEST	60767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.591315985 CEST	443	60767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.591564894 CEST	60767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.591582060 CEST	443	60767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.680655956 CEST	443	60772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.681121111 CEST	60772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.681149006 CEST	443	60772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.681541920 CEST	60772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.681546926 CEST	443	60772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.707664013 CEST	443	60767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.707741976 CEST	443	60767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.707861900 CEST	443	60767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.707881927 CEST	60767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.707957983 CEST	60767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.708010912 CEST	60767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.708056927 CEST	443	60767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.708108902 CEST	60767	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.708127022 CEST	443	60767	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.710591078 CEST	60776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.710685968 CEST	443	60776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.710788965 CEST	60776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.710952997 CEST	60776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.710983992 CEST	443	60776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.715199947 CEST	443	60773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.715600967 CEST	60773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.715619087 CEST	443	60773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.716052055 CEST	60773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.716058016 CEST	443	60773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.947696924 CEST	443	60772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.947756052 CEST	443	60773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.947760105 CEST	443	60772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.947779894 CEST	443	60773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.947837114 CEST	443	60773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.947838068 CEST	60772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.947881937 CEST	60773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.951313019 CEST	443	60775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.951462030 CEST	443	60774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.952672958 CEST	60773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.952702999 CEST	443	60773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.952709913 CEST	60772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.952719927 CEST	60773	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.952727079 CEST	443	60773	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.952739000 CEST	443	60772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.952749968 CEST	60772	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.952754974 CEST	443	60772	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.953502893 CEST	60775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.953512907 CEST	443	60775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.954087973 CEST	60775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.954092979 CEST	443	60775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.954343081 CEST	60774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.954376936 CEST	443	60774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.954736948 CEST	60774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.954746008 CEST	443	60774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.955878019 CEST	60777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.955926895 CEST	443	60777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.955938101 CEST	60778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.955945969 CEST	443	60778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.955991030 CEST	60777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.956032038 CEST	60778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.956111908 CEST	60777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.956119061 CEST	443	60777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:46.956178904 CEST	60778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:46.956182957 CEST	443	60778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.057522058 CEST	443	60775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.057907104 CEST	443	60775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.057975054 CEST	60775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.058043003 CEST	60775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.058068037 CEST	443	60775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.058092117 CEST	60775	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.058098078 CEST	443	60775	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.061196089 CEST	60779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.061278105 CEST	443	60779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.061362982 CEST	60779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.061575890 CEST	60779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.061613083 CEST	443	60779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.067995071 CEST	443	60774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.068160057 CEST	443	60774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.068217039 CEST	60774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.068253994 CEST	60774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.068273067 CEST	443	60774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.068284988 CEST	60774	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.068290949 CEST	443	60774	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.070579052 CEST	60780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.070619106 CEST	443	60780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.070682049 CEST	60780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.070805073 CEST	60780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.070822001 CEST	443	60780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.415076017 CEST	443	60776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.415565014 CEST	60776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.415631056 CEST	443	60776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.416016102 CEST	60776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.416032076 CEST	443	60776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.547266006 CEST	443	60776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.547461033 CEST	443	60776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.547539949 CEST	60776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.547605038 CEST	60776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.547605038 CEST	60776	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.547646999 CEST	443	60776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.547671080 CEST	443	60776	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.549701929 CEST	60781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.549803972 CEST	443	60781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.549886942 CEST	60781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.550000906 CEST	60781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.550020933 CEST	443	60781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.642026901 CEST	443	60777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.642515898 CEST	60777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.642539024 CEST	443	60777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.642929077 CEST	60777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.642935038 CEST	443	60777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.643851042 CEST	443	60778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.644071102 CEST	60778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.644085884 CEST	443	60778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.644357920 CEST	60778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.644362926 CEST	443	60778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.724540949 CEST	443	60779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.725049019 CEST	60779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.725111008 CEST	443	60779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.725523949 CEST	60779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.725544930 CEST	443	60779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.752209902 CEST	443	60780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.752693892 CEST	60780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.752716064 CEST	443	60780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.753135920 CEST	60780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.753142118 CEST	443	60780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.753587961 CEST	443	60777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.753671885 CEST	443	60778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.753782034 CEST	443	60778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.753828049 CEST	60778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.753892899 CEST	60778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.753914118 CEST	443	60778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.753923893 CEST	60778	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.753931999 CEST	443	60778	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.753942013 CEST	443	60777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.753985882 CEST	60777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.754005909 CEST	60777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.754009962 CEST	443	60777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.754018068 CEST	60777	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.754020929 CEST	443	60777	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.756715059 CEST	60782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.756757021 CEST	443	60782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.756771088 CEST	60783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.756799936 CEST	443	60783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.756829977 CEST	60782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.756855011 CEST	60783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.756980896 CEST	60783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.756999969 CEST	443	60783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.757000923 CEST	60782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.757014990 CEST	443	60782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.823554039 CEST	443	60779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.823805094 CEST	443	60779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.823887110 CEST	60779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.823961973 CEST	60779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.824008942 CEST	443	60779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.824038982 CEST	60779	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.824054956 CEST	443	60779	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.826948881 CEST	60784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.826987028 CEST	443	60784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.827048063 CEST	60784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.827265024 CEST	60784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.827280998 CEST	443	60784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.855834007 CEST	443	60780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.856041908 CEST	443	60780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.856117010 CEST	60780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.856162071 CEST	60780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.856184959 CEST	443	60780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.856197119 CEST	60780	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.856204033 CEST	443	60780	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.859152079 CEST	60785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.859205008 CEST	443	60785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:47.859281063 CEST	60785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.859432936 CEST	60785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:47.859441996 CEST	443	60785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.198442936 CEST	443	60781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.199002028 CEST	60781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.199038029 CEST	443	60781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.199404955 CEST	60781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.199410915 CEST	443	60781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.298135042 CEST	443	60781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.298320055 CEST	443	60781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.298366070 CEST	60781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.298372030 CEST	443	60781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.298419952 CEST	60781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.304476023 CEST	60781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.304514885 CEST	443	60781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.304531097 CEST	60781	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.304538012 CEST	443	60781	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.307442904 CEST	60786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.307482958 CEST	443	60786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.307554007 CEST	60786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.307737112 CEST	60786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.307744026 CEST	443	60786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.423247099 CEST	443	60783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.423480988 CEST	443	60784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.423924923 CEST	60784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.423955917 CEST	443	60784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.424154997 CEST	60783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.424154997 CEST	60783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.424171925 CEST	443	60783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.424186945 CEST	443	60783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.424412012 CEST	60784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.424420118 CEST	443	60784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.425263882 CEST	443	60782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.425558090 CEST	60782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.425592899 CEST	443	60782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.425920010 CEST	60782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.425926924 CEST	443	60782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.525247097 CEST	443	60784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.525628090 CEST	443	60784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.525685072 CEST	60784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.525736094 CEST	60784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.525749922 CEST	443	60784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.525760889 CEST	60784	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.525765896 CEST	443	60784	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.528198957 CEST	60787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.528229952 CEST	443	60787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.528295040 CEST	60787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.528423071 CEST	60787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.528438091 CEST	443	60787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.529949903 CEST	443	60782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.530134916 CEST	443	60782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.530180931 CEST	60782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.530245066 CEST	60782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.530262947 CEST	443	60782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.530275106 CEST	60782	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.530280113 CEST	443	60782	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.531224012 CEST	443	60783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.531284094 CEST	443	60783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.531361103 CEST	60783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.531402111 CEST	60783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.531414032 CEST	443	60783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.531424999 CEST	60783	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.531429052 CEST	443	60783	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.533139944 CEST	60788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.533200026 CEST	443	60788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.533303976 CEST	60788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.533576965 CEST	60788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.533608913 CEST	443	60788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.533907890 CEST	60789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.534010887 CEST	443	60789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.534086943 CEST	60789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.534243107 CEST	60789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.534276962 CEST	443	60789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.550553083 CEST	443	60785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.550892115 CEST	60785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.550911903 CEST	443	60785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.551263094 CEST	60785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.551266909 CEST	443	60785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.660919905 CEST	443	60785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.660969973 CEST	443	60785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.661030054 CEST	60785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.661076069 CEST	443	60785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.661107063 CEST	443	60785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.661151886 CEST	60785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.662966013 CEST	60785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.662986994 CEST	443	60785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.662997007 CEST	60785	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.663001060 CEST	443	60785	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.666030884 CEST	60790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.666100025 CEST	443	60790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.666173935 CEST	60790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.666481018 CEST	60790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.666521072 CEST	443	60790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.973454952 CEST	443	60786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.973907948 CEST	60786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.973939896 CEST	443	60786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:48.974283934 CEST	60786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:48.974292994 CEST	443	60786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.079272985 CEST	443	60786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.079575062 CEST	443	60786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.079621077 CEST	60786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.079632998 CEST	443	60786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.079687119 CEST	60786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.079718113 CEST	60786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.079741001 CEST	443	60786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.079751968 CEST	60786	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.079756975 CEST	443	60786	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.082492113 CEST	60791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.082525969 CEST	443	60791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.082592010 CEST	60791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.082742929 CEST	60791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.082747936 CEST	443	60791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.165776014 CEST	443	60788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.166234016 CEST	60788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.166254044 CEST	443	60788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.166678905 CEST	60788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.166683912 CEST	443	60788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.178869963 CEST	443	60789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.179193020 CEST	60789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.179228067 CEST	443	60789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.179560900 CEST	60789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.179568052 CEST	443	60789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.221436977 CEST	443	60787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.221807957 CEST	60787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.221829891 CEST	443	60787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.222232103 CEST	60787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.222239017 CEST	443	60787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.265110016 CEST	443	60788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.265182972 CEST	443	60788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.265405893 CEST	60788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.266515017 CEST	60788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.266515017 CEST	60788	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.266535044 CEST	443	60788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.266544104 CEST	443	60788	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.267714977 CEST	60792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.267761946 CEST	443	60792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.267852068 CEST	60792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.268012047 CEST	60792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.268021107 CEST	443	60792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.279366970 CEST	443	60789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.279464960 CEST	443	60789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.279519081 CEST	443	60789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.279563904 CEST	60789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.279644012 CEST	60789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.279644012 CEST	60789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.279644012 CEST	60789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.281498909 CEST	60793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.281534910 CEST	443	60793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.281594038 CEST	60793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.281723976 CEST	60793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.281738043 CEST	443	60793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.334888935 CEST	443	60787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.335122108 CEST	443	60787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.335182905 CEST	60787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.335201025 CEST	443	60787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.335242987 CEST	443	60787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.335279942 CEST	60787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.335302114 CEST	443	60787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.335315943 CEST	60787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.335315943 CEST	60787	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.335323095 CEST	443	60787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.335329056 CEST	443	60787	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.338090897 CEST	60794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.338104963 CEST	443	60794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.338185072 CEST	60794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.338332891 CEST	60794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.338344097 CEST	443	60794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.348413944 CEST	443	60790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.348890066 CEST	60790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.348983049 CEST	443	60790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.349366903 CEST	60790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.349380970 CEST	443	60790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.451788902 CEST	443	60790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.452084064 CEST	443	60790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.454690933 CEST	60790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.454799891 CEST	60790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.454799891 CEST	60790	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.454853058 CEST	443	60790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.454886913 CEST	443	60790	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.457205057 CEST	60795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.457259893 CEST	443	60795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.457350016 CEST	60795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.457504034 CEST	60795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.457520962 CEST	443	60795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.585839033 CEST	60789	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.585917950 CEST	443	60789	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.721640110 CEST	443	60791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.722951889 CEST	60791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.722970963 CEST	443	60791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.723400116 CEST	60791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.723404884 CEST	443	60791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.822308064 CEST	443	60791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.822326899 CEST	443	60791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.822408915 CEST	60791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.822422028 CEST	443	60791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.822504044 CEST	443	60791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.822642088 CEST	60791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.822663069 CEST	443	60791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.822675943 CEST	60791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.822675943 CEST	60791	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.822684050 CEST	443	60791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.822690010 CEST	443	60791	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.825458050 CEST	60796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.825490952 CEST	443	60796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.826603889 CEST	60796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.826898098 CEST	60796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.826906919 CEST	443	60796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.904103041 CEST	443	60792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.906986952 CEST	60792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.907016993 CEST	443	60792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.907418013 CEST	60792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.907423973 CEST	443	60792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.950844049 CEST	443	60793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.954957962 CEST	60793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.954983950 CEST	443	60793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:49.955281019 CEST	60793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:49.955286980 CEST	443	60793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.011210918 CEST	443	60792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.011276960 CEST	443	60792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.011327028 CEST	443	60792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.011472940 CEST	60792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.018009901 CEST	60792	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.018048048 CEST	443	60792	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.019638062 CEST	443	60794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.020553112 CEST	60794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.020553112 CEST	60794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.020561934 CEST	443	60794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.020569086 CEST	443	60794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.020874023 CEST	60797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.020919085 CEST	443	60797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.021575928 CEST	60797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.021697044 CEST	60797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.021712065 CEST	443	60797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.056060076 CEST	443	60793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.056392908 CEST	443	60793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.056437016 CEST	443	60793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.056485891 CEST	60793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.056487083 CEST	60793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.056664944 CEST	60793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.056664944 CEST	60793	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.056679964 CEST	443	60793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.056689024 CEST	443	60793	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.059267998 CEST	60798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.059309959 CEST	443	60798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.059415102 CEST	60798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.059556961 CEST	60798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.059570074 CEST	443	60798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.112971067 CEST	443	60795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.113481998 CEST	60795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.113507032 CEST	443	60795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.113991022 CEST	60795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.113995075 CEST	443	60795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.130065918 CEST	443	60794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.132946968 CEST	443	60794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.133088112 CEST	60794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.133088112 CEST	60794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.133236885 CEST	60794	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.133249044 CEST	443	60794	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.135832071 CEST	60799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.135868073 CEST	443	60799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.135943890 CEST	60799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.136063099 CEST	60799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.136074066 CEST	443	60799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.214580059 CEST	443	60795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.214741945 CEST	443	60795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.214852095 CEST	60795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.215009928 CEST	60795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.215029955 CEST	443	60795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.215049982 CEST	60795	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.215054989 CEST	443	60795	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.219948053 CEST	60800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.220046043 CEST	443	60800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.220115900 CEST	60800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.220330000 CEST	60800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.220361948 CEST	443	60800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.475861073 CEST	443	60796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.477097988 CEST	60796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.477138042 CEST	443	60796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.477783918 CEST	60796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.477794886 CEST	443	60796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.577048063 CEST	443	60796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.577158928 CEST	443	60796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.577327013 CEST	60796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.577538013 CEST	60796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.577558994 CEST	443	60796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.577570915 CEST	60796	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.577577114 CEST	443	60796	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.582015038 CEST	60801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.582046032 CEST	443	60801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.582191944 CEST	60801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.582345009 CEST	60801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.582355976 CEST	443	60801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.703432083 CEST	443	60797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.709228039 CEST	60797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.709249020 CEST	443	60797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.709686995 CEST	60797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.709692001 CEST	443	60797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.772150993 CEST	443	60799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.773000002 CEST	60799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.773017883 CEST	443	60799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.773574114 CEST	60799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.773578882 CEST	443	60799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.814418077 CEST	443	60797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.814448118 CEST	443	60797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.814483881 CEST	443	60797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.814543009 CEST	60797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.814758062 CEST	60797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.814775944 CEST	443	60797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.814789057 CEST	60797	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.814795017 CEST	443	60797	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.818011999 CEST	60802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.818042994 CEST	443	60802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.818130016 CEST	60802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.818490982 CEST	60802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.818504095 CEST	443	60802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.869350910 CEST	443	60800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.869729042 CEST	60800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.869754076 CEST	443	60800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.870179892 CEST	60800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.870183945 CEST	443	60800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.874613047 CEST	443	60799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.874640942 CEST	443	60799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.874677896 CEST	60799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.874686003 CEST	443	60799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.874697924 CEST	443	60799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.874738932 CEST	60799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.874913931 CEST	60799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.874923944 CEST	443	60799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.874933004 CEST	60799	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.874938011 CEST	443	60799	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.877310991 CEST	60803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.877337933 CEST	443	60803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.877398968 CEST	60803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.877506971 CEST	60803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.877515078 CEST	443	60803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.969520092 CEST	443	60800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.969683886 CEST	443	60800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.969773054 CEST	60800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.969985962 CEST	60800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.970033884 CEST	443	60800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.970065117 CEST	60800	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.970082045 CEST	443	60800	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.973109961 CEST	60804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.973154068 CEST	443	60804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:50.973237038 CEST	60804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.973387003 CEST	60804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:50.973407030 CEST	443	60804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.224087000 CEST	443	60801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.224761963 CEST	60801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.224772930 CEST	443	60801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.225385904 CEST	60801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.225390911 CEST	443	60801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.330921888 CEST	443	60801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.330960035 CEST	443	60801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.331099033 CEST	443	60801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.331101894 CEST	60801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.331183910 CEST	60801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.331336021 CEST	60801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.331357956 CEST	443	60801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.331370115 CEST	60801	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.331374884 CEST	443	60801	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.334342003 CEST	60805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.334381104 CEST	443	60805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.334455967 CEST	60805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.334604025 CEST	60805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.334610939 CEST	443	60805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.488660097 CEST	443	60802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.489240885 CEST	60802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.489253998 CEST	443	60802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.489751101 CEST	60802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.489754915 CEST	443	60802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.543054104 CEST	443	60803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.543550968 CEST	60803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.543581963 CEST	443	60803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.544001102 CEST	60803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.544009924 CEST	443	60803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.596518993 CEST	443	60802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.596766949 CEST	443	60802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.596868038 CEST	60802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.596889973 CEST	60802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.596889973 CEST	60802	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.596908092 CEST	443	60802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.596916914 CEST	443	60802	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.600039005 CEST	60806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.600080013 CEST	443	60806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.600182056 CEST	60806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.600353956 CEST	60806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.600368977 CEST	443	60806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.660943985 CEST	443	60803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.661022902 CEST	443	60803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.661322117 CEST	60803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.661370993 CEST	60803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.661392927 CEST	443	60803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.661406040 CEST	60803	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.661412001 CEST	443	60803	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.664371967 CEST	60807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.664417028 CEST	443	60807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.664499998 CEST	60807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.664778948 CEST	60807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.664789915 CEST	443	60807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.760344028 CEST	443	60798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.760982037 CEST	60798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.761015892 CEST	443	60798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.761526108 CEST	60798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.761534929 CEST	443	60798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.860249043 CEST	443	60798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.860332012 CEST	443	60798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.860575914 CEST	60798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.860621929 CEST	60798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.860621929 CEST	60798	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.860646009 CEST	443	60798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.860658884 CEST	443	60798	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.863291025 CEST	60808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.863320112 CEST	443	60808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.863414049 CEST	60808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.863604069 CEST	60808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.863620996 CEST	443	60808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.983526945 CEST	443	60805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.984108925 CEST	60805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.984149933 CEST	443	60805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:51.984504938 CEST	60805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:51.984513044 CEST	443	60805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.082554102 CEST	443	60805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.082746983 CEST	443	60805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.082804918 CEST	60805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.083019972 CEST	60805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.083041906 CEST	443	60805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.083048105 CEST	60805	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.083053112 CEST	443	60805	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.085601091 CEST	60809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.085652113 CEST	443	60809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.085720062 CEST	60809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.085859060 CEST	60809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.085865974 CEST	443	60809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.241205931 CEST	443	60806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.241760969 CEST	60806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.241786003 CEST	443	60806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.242542028 CEST	60806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.242552042 CEST	443	60806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.314426899 CEST	443	60807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.314805031 CEST	60807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.314843893 CEST	443	60807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.315135956 CEST	60807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.315140963 CEST	443	60807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.341121912 CEST	443	60806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.341175079 CEST	443	60806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.341361046 CEST	60806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.341392994 CEST	60806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.341412067 CEST	443	60806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.341424942 CEST	60806	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.341430902 CEST	443	60806	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.343787909 CEST	60810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.343879938 CEST	443	60810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.343977928 CEST	60810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.344099045 CEST	60810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.344124079 CEST	443	60810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.413542032 CEST	443	60807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.413644075 CEST	443	60807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.413760900 CEST	443	60807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.413793087 CEST	60807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.413819075 CEST	60807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.413872004 CEST	60807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.413892984 CEST	443	60807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.413904905 CEST	60807	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.413909912 CEST	443	60807	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.416899920 CEST	60811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.416956902 CEST	443	60811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.417026997 CEST	60811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.417150974 CEST	60811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.417167902 CEST	443	60811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.514384031 CEST	443	60808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.514926910 CEST	60808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.514991999 CEST	443	60808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.515271902 CEST	60808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.515286922 CEST	443	60808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.615264893 CEST	443	60808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.615319967 CEST	443	60808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.615398884 CEST	60808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.615957022 CEST	60808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.615957022 CEST	60808	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.615995884 CEST	443	60808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.616019011 CEST	443	60808	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.619604111 CEST	60812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.619646072 CEST	443	60812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.619803905 CEST	60812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.619997025 CEST	60812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.620012999 CEST	443	60812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.721416950 CEST	443	60809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.721846104 CEST	60809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.721877098 CEST	443	60809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.722244024 CEST	60809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.722249031 CEST	443	60809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.821039915 CEST	443	60809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.821192026 CEST	443	60809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.821243048 CEST	443	60809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.821274042 CEST	60809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.821305037 CEST	60809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.821578979 CEST	60809	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.821604013 CEST	443	60809	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.824528933 CEST	60813	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.824584961 CEST	443	60813	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.824692011 CEST	60813	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.824856043 CEST	60813	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.824873924 CEST	443	60813	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.978759050 CEST	443	60810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.979263067 CEST	60810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.979302883 CEST	443	60810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:52.979618073 CEST	60810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:52.979624987 CEST	443	60810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.061827898 CEST	443	60811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.062489986 CEST	60811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.062544107 CEST	443	60811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.062814951 CEST	60811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.062828064 CEST	443	60811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.079416990 CEST	443	60810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.079580069 CEST	443	60810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.079906940 CEST	60810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.079906940 CEST	60810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.079906940 CEST	60810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.082240105 CEST	60814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.082281113 CEST	443	60814	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.082355976 CEST	60814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.082504034 CEST	60814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.082520962 CEST	443	60814	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.160032988 CEST	443	60811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.160109043 CEST	443	60811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.160167933 CEST	60811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.160187006 CEST	443	60811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.160233974 CEST	443	60811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.160288095 CEST	60811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.160309076 CEST	60811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.160309076 CEST	60811	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.160321951 CEST	443	60811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.160330057 CEST	443	60811	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.163103104 CEST	60815	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.163139105 CEST	443	60815	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.163196087 CEST	60815	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.163350105 CEST	60815	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.163360119 CEST	443	60815	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.270205021 CEST	443	60812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.270584106 CEST	60812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.270622969 CEST	443	60812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.271034956 CEST	60812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.271040916 CEST	443	60812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.371191025 CEST	443	60812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.371243000 CEST	443	60812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.371289968 CEST	60812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.371428967 CEST	60812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.371453047 CEST	443	60812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.371467113 CEST	60812	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.371474028 CEST	443	60812	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.373773098 CEST	60816	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.373811960 CEST	443	60816	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.373871088 CEST	60816	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.374001026 CEST	60816	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.374010086 CEST	443	60816	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.384195089 CEST	60810	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.384222984 CEST	443	60810	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.463890076 CEST	443	60813	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.464422941 CEST	60813	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.464447975 CEST	443	60813	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.464987993 CEST	60813	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.464993000 CEST	443	60813	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.563807011 CEST	443	60813	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.564481974 CEST	443	60813	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.564523935 CEST	443	60813	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.564645052 CEST	60813	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.564646006 CEST	60813	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.566545963 CEST	60813	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.566545963 CEST	60813	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.566566944 CEST	443	60813	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.566575050 CEST	443	60813	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.567126989 CEST	60817	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.567171097 CEST	443	60817	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.567260981 CEST	60817	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.567440987 CEST	60817	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.567449093 CEST	443	60817	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.724338055 CEST	443	60814	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.724984884 CEST	60814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.725002050 CEST	443	60814	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.725368023 CEST	60814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.725372076 CEST	443	60814	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.812572956 CEST	443	60815	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.812988997 CEST	60815	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.813024044 CEST	443	60815	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.813431025 CEST	60815	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.813438892 CEST	443	60815	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.827526093 CEST	443	60814	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.828433990 CEST	443	60814	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.828633070 CEST	60814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.828633070 CEST	60814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.828633070 CEST	60814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.830888033 CEST	60818	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.830936909 CEST	443	60818	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.831029892 CEST	60818	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.831130981 CEST	60818	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.831136942 CEST	443	60818	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.930656910 CEST	443	60815	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.930682898 CEST	443	60815	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.930773973 CEST	443	60815	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.930915117 CEST	60815	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.931057930 CEST	60815	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.931623936 CEST	60815	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.931643009 CEST	443	60815	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.931680918 CEST	60815	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.931688070 CEST	443	60815	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.934696913 CEST	60819	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.934731960 CEST	443	60819	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:53.934834003 CEST	60819	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.935026884 CEST	60819	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:53.935034037 CEST	443	60819	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.042872906 CEST	443	60816	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.043467999 CEST	60816	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.043484926 CEST	443	60816	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.043883085 CEST	60816	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.043889999 CEST	443	60816	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.134166002 CEST	60814	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.134210110 CEST	443	60814	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.146328926 CEST	443	60816	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.146352053 CEST	443	60816	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.146397114 CEST	60816	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.146418095 CEST	443	60816	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.146646023 CEST	60816	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.146662951 CEST	443	60816	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.146670103 CEST	60816	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.146805048 CEST	443	60816	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.146831036 CEST	443	60816	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.146879911 CEST	60816	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.149504900 CEST	60820	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.149542093 CEST	443	60820	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.149655104 CEST	60820	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.149844885 CEST	60820	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.149849892 CEST	443	60820	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.234177113 CEST	443	60817	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.234689951 CEST	60817	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.234724998 CEST	443	60817	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.235109091 CEST	60817	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.235116959 CEST	443	60817	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.345673084 CEST	443	60817	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.345698118 CEST	443	60817	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.345751047 CEST	443	60817	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.345755100 CEST	60817	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.345794916 CEST	60817	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.350518942 CEST	60817	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.350553989 CEST	443	60817	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.350564003 CEST	60817	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.350569963 CEST	443	60817	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.353905916 CEST	60821	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.353955984 CEST	443	60821	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.354036093 CEST	60821	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.354166031 CEST	60821	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.354192019 CEST	443	60821	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.455960035 CEST	443	60804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.459830046 CEST	60804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.459888935 CEST	443	60804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.460359097 CEST	60804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.460366011 CEST	443	60804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.509437084 CEST	443	60818	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.510025978 CEST	60818	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.510078907 CEST	443	60818	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.510324001 CEST	60818	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.510329962 CEST	443	60818	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.570453882 CEST	443	60804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.570609093 CEST	443	60804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.570722103 CEST	60804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.571127892 CEST	60804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.571156979 CEST	443	60804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.571171045 CEST	60804	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.571178913 CEST	443	60804	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.574410915 CEST	60822	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.574456930 CEST	443	60822	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.577008963 CEST	60822	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.577135086 CEST	60822	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.577143908 CEST	443	60822	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.580545902 CEST	443	60819	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.580919027 CEST	60819	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.580954075 CEST	443	60819	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.581361055 CEST	60819	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.581368923 CEST	443	60819	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.614471912 CEST	443	60818	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.614759922 CEST	443	60818	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.614984989 CEST	60818	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.614984989 CEST	60818	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.614984989 CEST	60818	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.617254019 CEST	60823	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.617290020 CEST	443	60823	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.617448092 CEST	60823	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.617482901 CEST	60823	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.617487907 CEST	443	60823	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.683429003 CEST	443	60819	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.683690071 CEST	443	60819	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.683743000 CEST	443	60819	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.683764935 CEST	60819	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.683809996 CEST	60819	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.683857918 CEST	60819	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.683876991 CEST	443	60819	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.683888912 CEST	60819	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.683893919 CEST	443	60819	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.685967922 CEST	60824	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.686006069 CEST	443	60824	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.686248064 CEST	60824	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.686369896 CEST	60824	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.686376095 CEST	443	60824	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.830460072 CEST	443	60820	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.831027985 CEST	60820	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.831041098 CEST	443	60820	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.831438065 CEST	60820	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.831444025 CEST	443	60820	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.914922953 CEST	60818	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.914963961 CEST	443	60818	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.935565948 CEST	443	60820	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.935623884 CEST	443	60820	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.935851097 CEST	60820	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.935930967 CEST	60820	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.935930967 CEST	60820	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.935945988 CEST	443	60820	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.935952902 CEST	443	60820	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.938690901 CEST	60825	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.938730955 CEST	443	60825	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:54.939028025 CEST	60825	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.939090014 CEST	60825	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:54.939096928 CEST	443	60825	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.016273022 CEST	443	60821	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.016774893 CEST	60821	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.016869068 CEST	443	60821	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.017378092 CEST	60821	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.017393112 CEST	443	60821	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.117748022 CEST	443	60821	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.117774010 CEST	443	60821	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.117830038 CEST	443	60821	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.117841959 CEST	60821	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.117897034 CEST	60821	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.118971109 CEST	60821	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.118994951 CEST	443	60821	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.119008064 CEST	60821	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.119014978 CEST	443	60821	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.123435020 CEST	60826	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.123485088 CEST	443	60826	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.123558044 CEST	60826	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.123779058 CEST	60826	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.123795033 CEST	443	60826	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.247015953 CEST	443	60823	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.251137972 CEST	60823	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.251158953 CEST	443	60823	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.251553059 CEST	60823	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.251558065 CEST	443	60823	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.255314112 CEST	443	60822	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.258965969 CEST	60822	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.259030104 CEST	443	60822	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.259183884 CEST	60822	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.259208918 CEST	443	60822	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.346178055 CEST	443	60823	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.346254110 CEST	443	60823	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.346366882 CEST	60823	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.346369028 CEST	443	60823	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.346436977 CEST	60823	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.346596956 CEST	60823	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.346596956 CEST	60823	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.346612930 CEST	443	60823	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.346620083 CEST	443	60823	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.349406004 CEST	60827	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.349452972 CEST	443	60827	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.349550962 CEST	60827	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.349669933 CEST	60827	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.349675894 CEST	443	60827	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.354171038 CEST	443	60824	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.354896069 CEST	60824	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.354917049 CEST	443	60824	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.355513096 CEST	60824	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.355518103 CEST	443	60824	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.360789061 CEST	443	60822	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.360965014 CEST	443	60822	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.361085892 CEST	60822	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.361258030 CEST	60822	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.361258030 CEST	60822	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.361305952 CEST	443	60822	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.361334085 CEST	443	60822	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.363784075 CEST	60828	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.363812923 CEST	443	60828	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.363903999 CEST	60828	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.364007950 CEST	60828	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.364017963 CEST	443	60828	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.459115028 CEST	443	60824	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.459439039 CEST	443	60824	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.459594011 CEST	60824	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.459789991 CEST	60824	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.459810019 CEST	443	60824	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.459847927 CEST	60824	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.459855080 CEST	443	60824	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.462647915 CEST	60829	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.462722063 CEST	443	60829	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.462830067 CEST	60829	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.462946892 CEST	60829	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.462963104 CEST	443	60829	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.572206020 CEST	443	60825	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.574769020 CEST	60825	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.574795008 CEST	443	60825	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.575412989 CEST	60825	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.575417995 CEST	443	60825	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.678585052 CEST	443	60825	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.678973913 CEST	443	60825	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.679027081 CEST	443	60825	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.679032087 CEST	60825	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.679080963 CEST	60825	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.679148912 CEST	60825	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.679166079 CEST	443	60825	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.679176092 CEST	60825	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.679181099 CEST	443	60825	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.682075977 CEST	60830	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.682156086 CEST	443	60830	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.682245970 CEST	60830	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.682423115 CEST	60830	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.682459116 CEST	443	60830	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.770735025 CEST	443	60826	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.771446943 CEST	60826	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.771471024 CEST	443	60826	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.771887064 CEST	60826	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.771892071 CEST	443	60826	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.872230053 CEST	443	60826	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.872436047 CEST	443	60826	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.872543097 CEST	60826	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.872752905 CEST	60826	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.872775078 CEST	443	60826	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.872790098 CEST	60826	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.872797966 CEST	443	60826	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.875597000 CEST	60831	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.875636101 CEST	443	60831	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.875724077 CEST	60831	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.875888109 CEST	60831	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:55.875901937 CEST	443	60831	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:55.999627113 CEST	443	60827	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.003093004 CEST	60827	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.003133059 CEST	443	60827	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.003498077 CEST	60827	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.003504992 CEST	443	60827	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.006907940 CEST	443	60828	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.008455038 CEST	60828	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.008475065 CEST	443	60828	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.009006023 CEST	60828	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.009011984 CEST	443	60828	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.100240946 CEST	443	60827	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.100387096 CEST	443	60827	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.100650072 CEST	60827	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.100970984 CEST	60827	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.101001024 CEST	443	60827	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.101013899 CEST	60827	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.101020098 CEST	443	60827	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.104406118 CEST	60832	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.104463100 CEST	443	60832	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.104559898 CEST	60832	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.104722977 CEST	60832	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.104732037 CEST	443	60832	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.105314970 CEST	443	60828	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.105408907 CEST	443	60828	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.105464935 CEST	443	60828	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.105521917 CEST	60828	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.105592966 CEST	60828	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.105606079 CEST	443	60828	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.105617046 CEST	60828	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.105621099 CEST	443	60828	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.108052969 CEST	60833	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.108099937 CEST	443	60833	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.108184099 CEST	60833	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.108364105 CEST	60833	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.108378887 CEST	443	60833	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.124627113 CEST	443	60829	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.125063896 CEST	60829	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.125092983 CEST	443	60829	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.125792027 CEST	60829	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.125796080 CEST	443	60829	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.225480080 CEST	443	60829	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.225646973 CEST	443	60829	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.225734949 CEST	60829	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.226205111 CEST	60829	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.226227045 CEST	443	60829	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.226238966 CEST	60829	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.226243973 CEST	443	60829	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.307444096 CEST	60834	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.307468891 CEST	443	60834	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.307535887 CEST	60834	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.310621977 CEST	60834	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.310637951 CEST	443	60834	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.354686975 CEST	443	60830	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.355182886 CEST	60830	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.355199099 CEST	443	60830	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.355622053 CEST	60830	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.355627060 CEST	443	60830	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.621041059 CEST	443	60830	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.621108055 CEST	443	60830	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.621223927 CEST	60830	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.621442080 CEST	60830	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.621464014 CEST	443	60830	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.621474028 CEST	60830	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.621484041 CEST	443	60830	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.624825001 CEST	60835	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.624870062 CEST	443	60835	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.624972105 CEST	60835	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.625216007 CEST	60835	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.625228882 CEST	443	60835	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.755245924 CEST	443	60831	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.755815029 CEST	60831	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.755867004 CEST	443	60831	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:56.756453991 CEST	60831	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:56.756462097 CEST	443	60831	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.440251112 CEST	443	60833	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.440985918 CEST	60833	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.441010952 CEST	443	60833	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.441385031 CEST	60833	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.441390038 CEST	443	60833	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.526900053 CEST	443	60832	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.529977083 CEST	60832	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.529997110 CEST	443	60832	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.530421972 CEST	60832	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.530426979 CEST	443	60832	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.560429096 CEST	443	60831	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.560456038 CEST	443	60831	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.560518026 CEST	443	60831	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.560625076 CEST	60831	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.560729027 CEST	60831	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.560941935 CEST	60831	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.560941935 CEST	60831	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.560966015 CEST	443	60831	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.560978889 CEST	443	60831	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.563954115 CEST	60836	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.564004898 CEST	443	60836	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.564101934 CEST	60836	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.564312935 CEST	60836	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.564318895 CEST	443	60836	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.667028904 CEST	443	60833	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.668139935 CEST	443	60833	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.668190002 CEST	443	60833	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.668339014 CEST	60833	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.668339014 CEST	60833	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.668380976 CEST	60833	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.668380976 CEST	60833	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.668402910 CEST	443	60833	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.668414116 CEST	443	60833	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.671184063 CEST	60837	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.671236038 CEST	443	60837	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.671338081 CEST	60837	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.671520948 CEST	60837	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.671533108 CEST	443	60837	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.729792118 CEST	443	60832	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.730042934 CEST	443	60832	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.730122089 CEST	60832	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.730150938 CEST	60832	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.730170965 CEST	443	60832	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.730182886 CEST	60832	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.730187893 CEST	443	60832	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.730215073 CEST	443	60834	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.730922937 CEST	60834	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.730941057 CEST	443	60834	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.731527090 CEST	60834	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.731532097 CEST	443	60834	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.733144999 CEST	60838	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.733191967 CEST	443	60838	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.733267069 CEST	60838	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.733428001 CEST	60838	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.733445883 CEST	443	60838	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.829225063 CEST	443	60834	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.829746008 CEST	443	60834	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.834614992 CEST	60834	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.834662914 CEST	60834	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.834685087 CEST	443	60834	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.834697962 CEST	60834	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.834703922 CEST	443	60834	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.837877035 CEST	60839	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.837930918 CEST	443	60839	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.838028908 CEST	60839	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.838161945 CEST	60839	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.838170052 CEST	443	60839	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.897838116 CEST	443	60835	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.902985096 CEST	60835	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.903013945 CEST	443	60835	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:57.903407097 CEST	60835	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:57.903412104 CEST	443	60835	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.011559963 CEST	443	60835	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.011785030 CEST	443	60835	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.014626026 CEST	60835	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.014710903 CEST	60835	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.014734983 CEST	443	60835	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.014750957 CEST	60835	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.014755964 CEST	443	60835	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.018071890 CEST	60840	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.018114090 CEST	443	60840	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.018285990 CEST	60840	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.018353939 CEST	60840	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.018359900 CEST	443	60840	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.286881924 CEST	443	60836	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.287537098 CEST	60836	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.287570953 CEST	443	60836	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.287977934 CEST	60836	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.287983894 CEST	443	60836	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.323158026 CEST	443	60837	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.324254990 CEST	60837	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.324254990 CEST	60837	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.324275970 CEST	443	60837	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.324290037 CEST	443	60837	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.375211954 CEST	443	60838	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.375772953 CEST	60838	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.375796080 CEST	443	60838	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.376373053 CEST	60838	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.376383066 CEST	443	60838	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.392175913 CEST	443	60836	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.392204046 CEST	443	60836	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.392251968 CEST	443	60836	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.392271042 CEST	60836	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.392322063 CEST	60836	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.392544031 CEST	60836	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.392564058 CEST	443	60836	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.392602921 CEST	60836	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.392607927 CEST	443	60836	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.395364046 CEST	60841	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.395463943 CEST	443	60841	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.395590067 CEST	60841	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.395705938 CEST	60841	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.395726919 CEST	443	60841	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.424860001 CEST	443	60837	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.425004959 CEST	443	60837	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.425092936 CEST	60837	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.425182104 CEST	60837	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.425182104 CEST	60837	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.425201893 CEST	443	60837	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.425216913 CEST	443	60837	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.428077936 CEST	60842	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.428117990 CEST	443	60842	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.428215027 CEST	60842	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.428343058 CEST	60842	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.428364992 CEST	443	60842	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.476847887 CEST	443	60838	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.477013111 CEST	443	60838	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.477128029 CEST	60838	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.477271080 CEST	60838	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.477288961 CEST	443	60838	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.477305889 CEST	60838	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.477313042 CEST	443	60838	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.480958939 CEST	60843	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.480993986 CEST	443	60843	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.481715918 CEST	60843	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.481715918 CEST	60843	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.481749058 CEST	443	60843	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.515957117 CEST	443	60839	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.516591072 CEST	60839	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.516630888 CEST	443	60839	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.516989946 CEST	60839	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.516998053 CEST	443	60839	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.622620106 CEST	443	60839	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.622896910 CEST	443	60839	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.622950077 CEST	443	60839	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.623029947 CEST	60839	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.625147104 CEST	60839	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.625171900 CEST	443	60839	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.625186920 CEST	60839	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.625191927 CEST	443	60839	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.627760887 CEST	60844	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.627799988 CEST	443	60844	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.627907991 CEST	60844	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.628038883 CEST	60844	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.628048897 CEST	443	60844	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.665529966 CEST	443	60840	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.666604996 CEST	60840	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.666604996 CEST	60840	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.666626930 CEST	443	60840	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.666644096 CEST	443	60840	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.766560078 CEST	443	60840	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.767249107 CEST	443	60840	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.767348051 CEST	60840	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.786715984 CEST	60840	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.786715984 CEST	60840	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.786730051 CEST	443	60840	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.786740065 CEST	443	60840	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.792664051 CEST	60845	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.792701960 CEST	443	60845	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:58.792778969 CEST	60845	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.793309927 CEST	60845	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:58.793320894 CEST	443	60845	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.037753105 CEST	443	60841	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.043107033 CEST	60841	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.043143988 CEST	443	60841	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.043479919 CEST	60841	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.043489933 CEST	443	60841	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.109195948 CEST	443	60842	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.129653931 CEST	60842	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.129709005 CEST	443	60842	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.130110979 CEST	60842	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.130127907 CEST	443	60842	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.147877932 CEST	443	60841	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.147938013 CEST	443	60841	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.147994995 CEST	443	60841	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.147994995 CEST	60841	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.148066044 CEST	60841	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.148374081 CEST	60841	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.148403883 CEST	443	60841	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.148423910 CEST	60841	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.148432016 CEST	443	60841	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.151262999 CEST	60846	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.151308060 CEST	443	60846	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.151392937 CEST	60846	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.151529074 CEST	60846	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.151546001 CEST	443	60846	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.196526051 CEST	443	60843	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.197122097 CEST	60843	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.197135925 CEST	443	60843	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.197602987 CEST	60843	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.197613001 CEST	443	60843	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.232419968 CEST	443	60842	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.232580900 CEST	443	60842	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.232691050 CEST	60842	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.232830048 CEST	60842	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.232861996 CEST	443	60842	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.232882977 CEST	60842	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.232892036 CEST	443	60842	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.236150980 CEST	60847	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.236186981 CEST	443	60847	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.236413002 CEST	60847	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.236521959 CEST	60847	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.236531973 CEST	443	60847	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.285957098 CEST	443	60844	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.286703110 CEST	60844	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.286727905 CEST	443	60844	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.287204981 CEST	60844	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.287213087 CEST	443	60844	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.302062035 CEST	443	60843	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.302237034 CEST	443	60843	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.302306890 CEST	60843	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.302388906 CEST	60843	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.302405119 CEST	443	60843	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.302414894 CEST	60843	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.302419901 CEST	443	60843	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.305489063 CEST	60848	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.305537939 CEST	443	60848	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.305628061 CEST	60848	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.305784941 CEST	60848	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.305808067 CEST	443	60848	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.388844967 CEST	443	60844	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.388999939 CEST	443	60844	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.389125109 CEST	60844	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.389209032 CEST	60844	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.389209032 CEST	60844	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.389225960 CEST	443	60844	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.389235020 CEST	443	60844	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.392318010 CEST	60849	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.392364025 CEST	443	60849	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.392455101 CEST	60849	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.392687082 CEST	60849	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.392703056 CEST	443	60849	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.462208033 CEST	443	60845	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.462909937 CEST	60845	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.462960958 CEST	443	60845	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.463363886 CEST	60845	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.463371038 CEST	443	60845	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.563757896 CEST	443	60845	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.563868046 CEST	443	60845	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.563930035 CEST	443	60845	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.563963890 CEST	60845	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.563992977 CEST	60845	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.564270020 CEST	60845	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.564294100 CEST	443	60845	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.564306974 CEST	60845	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.564312935 CEST	443	60845	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.567584038 CEST	60850	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.567630053 CEST	443	60850	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.567740917 CEST	60850	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.567948103 CEST	60850	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.567960024 CEST	443	60850	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.792365074 CEST	443	60846	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.793154001 CEST	60846	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.793185949 CEST	443	60846	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.793618917 CEST	60846	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.793627977 CEST	443	60846	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.879534006 CEST	443	60847	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.880266905 CEST	60847	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.880295992 CEST	443	60847	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.880665064 CEST	60847	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.880671978 CEST	443	60847	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.893665075 CEST	443	60846	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.893871069 CEST	443	60846	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.893935919 CEST	60846	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.893980026 CEST	60846	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.893980026 CEST	60846	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.894001961 CEST	443	60846	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.894010067 CEST	443	60846	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.897144079 CEST	60851	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.897191048 CEST	443	60851	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.897277117 CEST	60851	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.897460938 CEST	60851	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.897470951 CEST	443	60851	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.979342937 CEST	443	60847	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.979408979 CEST	443	60847	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.979470015 CEST	60847	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.979470968 CEST	443	60847	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.979517937 CEST	60847	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.979726076 CEST	60847	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.979744911 CEST	443	60847	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.979759932 CEST	60847	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.979765892 CEST	443	60847	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.982814074 CEST	60852	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.982853889 CEST	443	60852	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.982924938 CEST	60852	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.983087063 CEST	60852	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.983098030 CEST	443	60852	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.985985041 CEST	443	60848	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.986572981 CEST	60848	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.986594915 CEST	443	60848	13.107.246.45	192.168.2.5
Oct 10, 2024 15:32:59.986963987 CEST	60848	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:32:59.986969948 CEST	443	60848	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.047027111 CEST	443	60849	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.047489882 CEST	60849	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.047514915 CEST	443	60849	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.047935009 CEST	60849	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.047940969 CEST	443	60849	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.090025902 CEST	443	60848	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.090183020 CEST	443	60848	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.090318918 CEST	60848	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.090389967 CEST	60848	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.090389967 CEST	60848	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.090406895 CEST	443	60848	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.090415001 CEST	443	60848	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.100661039 CEST	60853	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.100716114 CEST	443	60853	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.100805998 CEST	60853	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.100946903 CEST	60853	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.100953102 CEST	443	60853	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.147243977 CEST	443	60849	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.147422075 CEST	443	60849	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.147475958 CEST	60849	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.147488117 CEST	443	60849	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.147540092 CEST	60849	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.147635937 CEST	60849	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.147660017 CEST	443	60849	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.147674084 CEST	60849	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.147680998 CEST	443	60849	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.151613951 CEST	60854	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.151650906 CEST	443	60854	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.151732922 CEST	60854	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.151871920 CEST	60854	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.151885986 CEST	443	60854	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.235552073 CEST	443	60850	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.236005068 CEST	60850	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.236021042 CEST	443	60850	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.236489058 CEST	60850	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.236494064 CEST	443	60850	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.338777065 CEST	443	60850	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.338927031 CEST	443	60850	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.338989019 CEST	60850	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.339099884 CEST	60850	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.339112997 CEST	443	60850	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.339123964 CEST	60850	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.339128971 CEST	443	60850	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.341665030 CEST	60855	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.341701984 CEST	443	60855	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.341782093 CEST	60855	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.341926098 CEST	60855	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.341942072 CEST	443	60855	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.530595064 CEST	443	60851	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.530999899 CEST	60851	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.531016111 CEST	443	60851	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.532114983 CEST	60851	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.532119036 CEST	443	60851	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.619781017 CEST	443	60852	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.620318890 CEST	60852	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.620330095 CEST	443	60852	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.620651960 CEST	60852	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.620656013 CEST	443	60852	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.629878998 CEST	443	60851	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.630326986 CEST	443	60851	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.630388975 CEST	60851	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.630587101 CEST	60851	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.630587101 CEST	60851	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.630601883 CEST	443	60851	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.630608082 CEST	443	60851	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.632649899 CEST	60856	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.632688046 CEST	443	60856	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.632762909 CEST	60856	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.632877111 CEST	60856	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.632889032 CEST	443	60856	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.719014883 CEST	443	60852	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.719285965 CEST	443	60852	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.719470978 CEST	60852	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.719470978 CEST	60852	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.719470978 CEST	60852	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.721946001 CEST	60857	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.721987009 CEST	443	60857	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.722060919 CEST	60857	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.722189903 CEST	60857	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.722204924 CEST	443	60857	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.756413937 CEST	443	60853	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.756916046 CEST	60853	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.756958008 CEST	443	60853	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.757364988 CEST	60853	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.757370949 CEST	443	60853	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.858474016 CEST	443	60853	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.858541965 CEST	443	60853	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.858649015 CEST	443	60853	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.858711958 CEST	60853	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.858860016 CEST	60853	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.858860016 CEST	60853	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.861661911 CEST	60853	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.861663103 CEST	60858	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.861684084 CEST	443	60853	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.861702919 CEST	443	60858	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.861795902 CEST	60858	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.861954927 CEST	60858	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.861969948 CEST	443	60858	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.871197939 CEST	443	60854	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.871596098 CEST	60854	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.871618032 CEST	443	60854	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.872046947 CEST	60854	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.872051954 CEST	443	60854	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.980022907 CEST	443	60855	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.980535984 CEST	60855	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.980561972 CEST	443	60855	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.980988979 CEST	60855	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.980994940 CEST	443	60855	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.986428976 CEST	443	60854	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.986643076 CEST	443	60854	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.986716032 CEST	60854	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.986747026 CEST	60854	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.986768007 CEST	443	60854	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.986782074 CEST	60854	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.986788034 CEST	443	60854	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.989640951 CEST	60859	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.989689112 CEST	443	60859	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:00.989784002 CEST	60859	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.989926100 CEST	60859	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:00.989934921 CEST	443	60859	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.024010897 CEST	60852	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.024034023 CEST	443	60852	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.078308105 CEST	443	60855	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.078665972 CEST	443	60855	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.078718901 CEST	60855	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.078830957 CEST	60855	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.078845024 CEST	443	60855	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.078854084 CEST	60855	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.078860044 CEST	443	60855	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.082489014 CEST	60860	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.082544088 CEST	443	60860	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.082621098 CEST	60860	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.082849026 CEST	60860	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.082885981 CEST	443	60860	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.297976017 CEST	443	60856	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.298413038 CEST	60856	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.298424959 CEST	443	60856	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.298876047 CEST	60856	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.298881054 CEST	443	60856	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.401153088 CEST	443	60856	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.401218891 CEST	443	60856	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.401463985 CEST	60856	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.404107094 CEST	443	60857	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.418740034 CEST	60856	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.418754101 CEST	443	60856	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.418768883 CEST	60856	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.418773890 CEST	443	60856	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.420084000 CEST	60857	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.420106888 CEST	443	60857	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.420506001 CEST	60857	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.420512915 CEST	443	60857	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.422286034 CEST	60861	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.422317982 CEST	443	60861	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.422375917 CEST	60861	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.422487974 CEST	60861	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.422496080 CEST	443	60861	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.530759096 CEST	443	60857	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.530898094 CEST	443	60857	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.530961037 CEST	60857	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.531661987 CEST	60857	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.531683922 CEST	443	60857	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.531697989 CEST	60857	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.531704903 CEST	443	60857	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.554081917 CEST	60862	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.554110050 CEST	443	60862	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.554188967 CEST	60862	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.554337025 CEST	60862	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.554341078 CEST	443	60862	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.559036970 CEST	443	60858	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.590806007 CEST	60858	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.590830088 CEST	443	60858	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.591228962 CEST	60858	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.591236115 CEST	443	60858	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.634660006 CEST	443	60859	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.635107040 CEST	60859	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.635138035 CEST	443	60859	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.635493994 CEST	60859	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.635499954 CEST	443	60859	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.686435938 CEST	443	60858	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.686949015 CEST	443	60858	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.687009096 CEST	60858	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.687046051 CEST	60858	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.687046051 CEST	60858	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.687063932 CEST	443	60858	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.687076092 CEST	443	60858	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.689650059 CEST	60863	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.689749956 CEST	443	60863	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.689832926 CEST	60863	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.689925909 CEST	60863	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.689944983 CEST	443	60863	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.730568886 CEST	443	60860	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.731127977 CEST	60860	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.731194973 CEST	443	60860	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.731439114 CEST	60860	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.731453896 CEST	443	60860	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.732512951 CEST	443	60859	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.732680082 CEST	443	60859	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.732750893 CEST	60859	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.732800007 CEST	60859	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.732821941 CEST	443	60859	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.732835054 CEST	60859	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.732840061 CEST	443	60859	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.734962940 CEST	60864	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.734998941 CEST	443	60864	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.735075951 CEST	60864	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.735194921 CEST	60864	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.735203028 CEST	443	60864	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.829673052 CEST	443	60860	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.829828978 CEST	443	60860	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.830069065 CEST	60860	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.830069065 CEST	60860	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.830069065 CEST	60860	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.832782984 CEST	60865	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.832825899 CEST	443	60865	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:01.832918882 CEST	60865	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.833080053 CEST	60865	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:01.833103895 CEST	443	60865	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.055429935 CEST	60860	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.055506945 CEST	443	60860	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.075845003 CEST	443	60861	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.076483965 CEST	60861	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.076498985 CEST	443	60861	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.076874018 CEST	60861	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.076878071 CEST	443	60861	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.128587961 CEST	443	60862	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.129636049 CEST	60862	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.129636049 CEST	60862	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.129651070 CEST	443	60862	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.129662037 CEST	443	60862	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.176511049 CEST	443	60861	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.176584959 CEST	443	60861	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.176639080 CEST	443	60861	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.176657915 CEST	60861	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.176704884 CEST	60861	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.176949024 CEST	60861	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.176949024 CEST	60861	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.176961899 CEST	443	60861	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.176969051 CEST	443	60861	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.180008888 CEST	60866	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.180048943 CEST	443	60866	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.180119038 CEST	60866	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.180404902 CEST	60866	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.180418968 CEST	443	60866	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.230181932 CEST	443	60862	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.230434895 CEST	443	60862	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.230566978 CEST	60862	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.236001968 CEST	60862	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.236001968 CEST	60862	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.236021042 CEST	443	60862	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.236030102 CEST	443	60862	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.238878012 CEST	60867	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.238909006 CEST	443	60867	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.238976955 CEST	60867	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.239103079 CEST	60867	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.239110947 CEST	443	60867	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.353454113 CEST	443	60863	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.354232073 CEST	60863	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.354307890 CEST	443	60863	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.354551077 CEST	60863	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.354566097 CEST	443	60863	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.375930071 CEST	443	60864	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.376404047 CEST	60864	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.376456022 CEST	443	60864	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.376730919 CEST	60864	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.376738071 CEST	443	60864	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.470403910 CEST	58120	53	192.168.2.5	1.1.1.1
Oct 10, 2024 15:33:02.474709034 CEST	443	60863	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.474731922 CEST	443	60863	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.474773884 CEST	443	60863	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.474806070 CEST	60863	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.474849939 CEST	60863	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.475075960 CEST	60863	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.475119114 CEST	443	60863	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.475147963 CEST	60863	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.475162029 CEST	443	60863	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.475322008 CEST	53	58120	1.1.1.1	192.168.2.5
Oct 10, 2024 15:33:02.475415945 CEST	58120	53	192.168.2.5	1.1.1.1
Oct 10, 2024 15:33:02.475455046 CEST	58120	53	192.168.2.5	1.1.1.1
Oct 10, 2024 15:33:02.478221893 CEST	58121	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.478264093 CEST	443	58121	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.478348970 CEST	58121	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.478512049 CEST	58121	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.478543043 CEST	443	58121	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.480307102 CEST	53	58120	1.1.1.1	192.168.2.5
Oct 10, 2024 15:33:02.487539053 CEST	443	60865	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.488015890 CEST	60865	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.488033056 CEST	443	60865	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.488465071 CEST	60865	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.488475084 CEST	443	60865	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.588473082 CEST	443	60865	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.588510036 CEST	443	60865	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.588560104 CEST	443	60865	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.588570118 CEST	60865	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.588582039 CEST	443	60864	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.588619947 CEST	60865	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.588748932 CEST	443	60864	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.588804960 CEST	60864	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.588864088 CEST	60864	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.588884115 CEST	443	60864	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.588884115 CEST	60865	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.588884115 CEST	60865	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.588898897 CEST	60864	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.588905096 CEST	443	60864	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.588912964 CEST	443	60865	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.588933945 CEST	443	60865	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.591738939 CEST	58122	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.591770887 CEST	443	58122	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.591933012 CEST	58123	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.591941118 CEST	58122	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.591960907 CEST	443	58123	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.591988087 CEST	58122	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.592000008 CEST	443	58122	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.592016935 CEST	58123	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.592149973 CEST	58123	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.592158079 CEST	443	58123	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.865176916 CEST	443	60866	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.865906954 CEST	60866	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.865988016 CEST	443	60866	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.866172075 CEST	60866	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.866188049 CEST	443	60866	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.890676975 CEST	443	60867	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.891125917 CEST	60867	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.891155005 CEST	443	60867	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.891565084 CEST	60867	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.891570091 CEST	443	60867	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.935158968 CEST	53	58120	1.1.1.1	192.168.2.5
Oct 10, 2024 15:33:02.935940027 CEST	58120	53	192.168.2.5	1.1.1.1
Oct 10, 2024 15:33:02.941315889 CEST	53	58120	1.1.1.1	192.168.2.5
Oct 10, 2024 15:33:02.941401958 CEST	58120	53	192.168.2.5	1.1.1.1
Oct 10, 2024 15:33:02.970093966 CEST	443	60866	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.970155001 CEST	443	60866	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.970293999 CEST	60866	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.972464085 CEST	60866	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.972515106 CEST	443	60866	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.972547054 CEST	60866	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.972563982 CEST	443	60866	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.975671053 CEST	58125	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.975706100 CEST	443	58125	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.975795031 CEST	58125	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.975974083 CEST	58125	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.975986958 CEST	443	58125	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.991214991 CEST	443	60867	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.991354942 CEST	443	60867	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.991431952 CEST	60867	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.991584063 CEST	60867	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.991606951 CEST	443	60867	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.991647005 CEST	60867	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.991655111 CEST	443	60867	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.994306087 CEST	58126	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.994338036 CEST	443	58126	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:02.994431019 CEST	58126	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.994594097 CEST	58126	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:02.994606972 CEST	443	58126	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.119986057 CEST	443	58121	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.120585918 CEST	58121	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.120600939 CEST	443	58121	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.121009111 CEST	58121	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.121015072 CEST	443	58121	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.245749950 CEST	443	58121	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.247554064 CEST	443	58121	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.247642040 CEST	58121	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.247889042 CEST	58121	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.247952938 CEST	443	58121	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.247981071 CEST	58121	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.248012066 CEST	443	58121	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.250623941 CEST	58127	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.250715971 CEST	443	58127	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.250802040 CEST	58127	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.251012087 CEST	58127	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.251043081 CEST	443	58127	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.287905931 CEST	443	58122	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.288559914 CEST	58122	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.288592100 CEST	443	58122	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.289004087 CEST	58122	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.289016008 CEST	443	58122	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.298526049 CEST	443	58123	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.299103975 CEST	58123	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.299138069 CEST	443	58123	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.299443960 CEST	58123	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.299451113 CEST	443	58123	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.390512943 CEST	443	58122	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.390676975 CEST	443	58122	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.390803099 CEST	58122	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.390860081 CEST	58122	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.390860081 CEST	58122	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.390906096 CEST	443	58122	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.390933990 CEST	443	58122	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.393846035 CEST	58128	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.393888950 CEST	443	58128	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.394022942 CEST	58128	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.394217014 CEST	58128	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.394232035 CEST	443	58128	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.402604103 CEST	443	58123	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.402796030 CEST	443	58123	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.402851105 CEST	443	58123	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.402885914 CEST	58123	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.402914047 CEST	58123	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.402976990 CEST	58123	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.402995110 CEST	443	58123	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.403006077 CEST	58123	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.403011084 CEST	443	58123	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.405364990 CEST	58129	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.405400038 CEST	443	58129	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.405524969 CEST	58129	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.405699968 CEST	58129	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.405714989 CEST	443	58129	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.644906044 CEST	443	58126	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.647102118 CEST	58126	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.647119045 CEST	443	58126	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.647562981 CEST	58126	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.647567034 CEST	443	58126	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.667828083 CEST	443	58125	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.668296099 CEST	58125	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.668303967 CEST	443	58125	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.668740988 CEST	58125	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.668745041 CEST	443	58125	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.761051893 CEST	443	58126	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.761071920 CEST	443	58126	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.761132956 CEST	58126	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.761142969 CEST	443	58126	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.761244059 CEST	443	58126	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.761313915 CEST	58126	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.761476040 CEST	58126	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.761491060 CEST	443	58126	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.761499882 CEST	58126	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.761504889 CEST	443	58126	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.766024113 CEST	58130	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.766063929 CEST	443	58130	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.766135931 CEST	58130	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.766269922 CEST	58130	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.766283035 CEST	443	58130	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.772839069 CEST	443	58125	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.772888899 CEST	443	58125	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.772947073 CEST	58125	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.774709940 CEST	58125	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.774719000 CEST	443	58125	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.774728060 CEST	58125	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.774732113 CEST	443	58125	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.776956081 CEST	58131	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.777004004 CEST	443	58131	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.777182102 CEST	58131	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.777261972 CEST	58131	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.777275085 CEST	443	58131	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.889306068 CEST	443	58127	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.905381918 CEST	58127	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.905405998 CEST	443	58127	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:03.905875921 CEST	58127	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:03.905886889 CEST	443	58127	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.001959085 CEST	443	58127	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.002147913 CEST	443	58127	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.002388000 CEST	58127	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.048208952 CEST	443	58129	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.055046082 CEST	443	58128	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.089268923 CEST	58127	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.089353085 CEST	443	58127	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.089406013 CEST	58127	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.089423895 CEST	443	58127	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.090512037 CEST	58129	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.090526104 CEST	443	58129	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.090981960 CEST	58129	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.090986013 CEST	443	58129	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.091188908 CEST	58128	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.091217041 CEST	443	58128	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.091516018 CEST	58128	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.091523886 CEST	443	58128	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.101166964 CEST	58132	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.101222038 CEST	443	58132	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.101412058 CEST	58132	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.101577997 CEST	58132	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.101591110 CEST	443	58132	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.186836004 CEST	443	58129	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.186865091 CEST	443	58129	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.186913967 CEST	58129	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.186928034 CEST	443	58129	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.187041998 CEST	443	58129	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.187093019 CEST	58129	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.188493967 CEST	58129	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.188505888 CEST	443	58129	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.188519955 CEST	58129	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.188524961 CEST	443	58129	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.189270020 CEST	443	58128	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.189328909 CEST	443	58128	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.189388037 CEST	58128	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.189407110 CEST	443	58128	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.189460993 CEST	443	58128	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.189515114 CEST	58128	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.189752102 CEST	58128	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.189771891 CEST	443	58128	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.189794064 CEST	58128	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.189800024 CEST	443	58128	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.192950964 CEST	58133	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.192987919 CEST	443	58133	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.194314957 CEST	58133	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.195326090 CEST	58134	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.195333004 CEST	443	58134	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.195399046 CEST	58134	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.197211027 CEST	58133	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.197225094 CEST	443	58133	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.198123932 CEST	58134	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.198133945 CEST	443	58134	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.413244009 CEST	443	58131	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.413666964 CEST	58131	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.413686037 CEST	443	58131	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.414127111 CEST	58131	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.414135933 CEST	443	58131	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.415174007 CEST	443	58130	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.415558100 CEST	58130	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.415574074 CEST	443	58130	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.415991068 CEST	58130	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.415997982 CEST	443	58130	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.513580084 CEST	443	58131	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.513605118 CEST	443	58131	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.513679028 CEST	58131	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.513696909 CEST	443	58131	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.513798952 CEST	443	58131	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.513817072 CEST	443	58130	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.513842106 CEST	443	58130	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.513845921 CEST	58131	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.513889074 CEST	58130	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.513904095 CEST	443	58130	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.514538050 CEST	443	58130	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.514585972 CEST	58130	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.515221119 CEST	58131	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.515242100 CEST	443	58131	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.515255928 CEST	58131	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.515260935 CEST	443	58131	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.516627073 CEST	58130	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.516644001 CEST	443	58130	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.516654968 CEST	58130	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.516660929 CEST	443	58130	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.525763035 CEST	58135	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.525846958 CEST	443	58135	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.525929928 CEST	58135	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.528364897 CEST	58136	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.528403044 CEST	443	58136	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.528923035 CEST	58136	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.528942108 CEST	58135	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.528964996 CEST	443	58135	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.530802011 CEST	58136	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.530813932 CEST	443	58136	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.766279936 CEST	443	58132	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.766742945 CEST	58132	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.766774893 CEST	443	58132	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.767218113 CEST	58132	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.767224073 CEST	443	58132	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.856738091 CEST	443	58134	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.866564989 CEST	443	58133	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.872780085 CEST	58134	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.872807980 CEST	443	58134	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.873203039 CEST	58134	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.873208046 CEST	443	58134	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.873817921 CEST	58133	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.873817921 CEST	58133	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.873831034 CEST	443	58133	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.873835087 CEST	443	58133	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.895466089 CEST	443	58132	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.895634890 CEST	443	58132	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.895701885 CEST	58132	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.901063919 CEST	58132	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.901093006 CEST	443	58132	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.901109934 CEST	58132	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.901117086 CEST	443	58132	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.904437065 CEST	58137	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.904481888 CEST	443	58137	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.904561996 CEST	58137	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.904690981 CEST	58137	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.904701948 CEST	443	58137	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.972899914 CEST	443	58134	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.972976923 CEST	443	58134	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.973170042 CEST	58134	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.973170042 CEST	58134	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.974602938 CEST	58134	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.974620104 CEST	443	58134	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.976083040 CEST	443	58133	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.976154089 CEST	443	58133	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.977178097 CEST	58138	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.977232933 CEST	443	58138	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.977299929 CEST	58138	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.977448940 CEST	58133	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.977448940 CEST	58133	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.977448940 CEST	58133	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.980807066 CEST	58138	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.980818033 CEST	443	58138	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.982943058 CEST	58139	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.982974052 CEST	443	58139	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:04.983040094 CEST	58139	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.983158112 CEST	58139	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:04.983170986 CEST	443	58139	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.174818039 CEST	443	58135	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.175368071 CEST	58135	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.175400019 CEST	443	58135	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.175956011 CEST	58135	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.175966024 CEST	443	58135	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.197453022 CEST	443	58136	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.198219061 CEST	58136	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.198239088 CEST	443	58136	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.198772907 CEST	58136	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.198779106 CEST	443	58136	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.274940014 CEST	443	58135	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.274964094 CEST	443	58135	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.275034904 CEST	58135	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.275074959 CEST	443	58135	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.275119066 CEST	58135	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.275206089 CEST	443	58135	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.275259972 CEST	443	58135	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.275304079 CEST	58135	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.275403023 CEST	58135	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.275422096 CEST	443	58135	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.275434017 CEST	58135	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.275439024 CEST	443	58135	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.278814077 CEST	58140	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.278856039 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.278920889 CEST	58140	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.279093981 CEST	58140	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.279110909 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.290144920 CEST	58133	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.290172100 CEST	443	58133	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.298557043 CEST	443	58136	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.298743963 CEST	443	58136	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.298845053 CEST	58136	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.298871040 CEST	58136	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.298882008 CEST	443	58136	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.298897028 CEST	58136	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.298902988 CEST	443	58136	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.301692009 CEST	58141	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.301736116 CEST	443	58141	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.301810980 CEST	58141	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.301939964 CEST	58141	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.301954031 CEST	443	58141	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.576179028 CEST	443	58137	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.576855898 CEST	58137	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.576886892 CEST	443	58137	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.577373981 CEST	58137	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.577379942 CEST	443	58137	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.624522924 CEST	443	58139	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.625534058 CEST	58139	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.625549078 CEST	443	58139	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.626092911 CEST	58139	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.626097918 CEST	443	58139	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.631288052 CEST	443	58138	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.631758928 CEST	58138	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.631841898 CEST	443	58138	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.632090092 CEST	58138	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.632105112 CEST	443	58138	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.681735039 CEST	443	58137	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.681807041 CEST	443	58137	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.681942940 CEST	443	58137	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.681965113 CEST	58137	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.682037115 CEST	58137	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.682423115 CEST	58137	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.682423115 CEST	58137	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.682480097 CEST	443	58137	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.682508945 CEST	443	58137	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.686412096 CEST	58142	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.686451912 CEST	443	58142	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.686680079 CEST	58142	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.686804056 CEST	58142	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.686817884 CEST	443	58142	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.723879099 CEST	443	58139	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.723910093 CEST	443	58139	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.724009037 CEST	443	58139	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.724059105 CEST	58139	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.724160910 CEST	58139	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.728723049 CEST	58139	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.728745937 CEST	443	58139	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.728786945 CEST	58139	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.728795052 CEST	443	58139	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.732577085 CEST	58143	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.732604980 CEST	443	58143	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.732712030 CEST	58143	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.732840061 CEST	58143	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.732848883 CEST	443	58143	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.734481096 CEST	443	58138	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.734545946 CEST	443	58138	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.734587908 CEST	443	58138	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.734716892 CEST	58138	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.734786987 CEST	443	58138	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.734865904 CEST	58138	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.819757938 CEST	443	58138	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.819921017 CEST	443	58138	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.819931030 CEST	58138	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.819982052 CEST	58138	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.820142984 CEST	58138	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.820183039 CEST	443	58138	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.820205927 CEST	58138	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.820216894 CEST	443	58138	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.824096918 CEST	58144	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.824141026 CEST	443	58144	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.824266911 CEST	58144	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.824557066 CEST	58144	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.824572086 CEST	443	58144	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.934135914 CEST	443	58141	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.934861898 CEST	58141	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.934894085 CEST	443	58141	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.935414076 CEST	58141	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.935420990 CEST	443	58141	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.938127995 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.938441038 CEST	58140	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.938473940 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:05.938801050 CEST	58140	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:05.938807964 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.033344030 CEST	443	58141	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.033366919 CEST	443	58141	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.033523083 CEST	58141	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.033554077 CEST	443	58141	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.033853054 CEST	58141	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.033910990 CEST	443	58141	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.033941984 CEST	58141	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.033947945 CEST	443	58141	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.033971071 CEST	58141	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.033977985 CEST	443	58141	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.037380934 CEST	58145	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.037410021 CEST	443	58145	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.037503004 CEST	58145	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.037661076 CEST	58145	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.037674904 CEST	443	58145	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.044138908 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.044166088 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.044238091 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.044287920 CEST	58140	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.044303894 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.044337034 CEST	58140	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.044387102 CEST	58140	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.131664038 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.131727934 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.131756067 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.131764889 CEST	58140	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.131813049 CEST	58140	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.132006884 CEST	58140	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.132025957 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.132036924 CEST	58140	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.132045031 CEST	443	58140	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.138144016 CEST	58146	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.138184071 CEST	443	58146	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.138511896 CEST	58146	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.139247894 CEST	58146	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.139262915 CEST	443	58146	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.321863890 CEST	443	58142	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.324222088 CEST	58142	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.324258089 CEST	443	58142	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.325566053 CEST	58142	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.325571060 CEST	443	58142	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.361615896 CEST	443	58143	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.362370014 CEST	58143	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.362387896 CEST	443	58143	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.362752914 CEST	58143	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.362759113 CEST	443	58143	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.438914061 CEST	443	58142	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.438935995 CEST	443	58142	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.438997030 CEST	443	58142	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.439068079 CEST	58142	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.439259052 CEST	58142	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.439397097 CEST	58142	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.439418077 CEST	443	58142	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.439429045 CEST	58142	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.439434052 CEST	443	58142	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.442663908 CEST	58148	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.442723036 CEST	443	58148	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.443087101 CEST	58148	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.443409920 CEST	58148	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.443420887 CEST	443	58148	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.466897964 CEST	443	58143	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.467240095 CEST	443	58143	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.467324018 CEST	58143	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.467359066 CEST	58143	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.467376947 CEST	443	58143	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.467396975 CEST	58143	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.467402935 CEST	443	58143	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.470192909 CEST	58149	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.470241070 CEST	443	58149	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.470315933 CEST	58149	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.470468044 CEST	58149	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.470480919 CEST	443	58149	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.513425112 CEST	443	58144	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.513964891 CEST	58144	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.513972998 CEST	443	58144	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.514511108 CEST	58144	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.514514923 CEST	443	58144	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.617810011 CEST	443	58144	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.617974043 CEST	443	58144	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.618071079 CEST	58144	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.618294954 CEST	58144	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.618311882 CEST	443	58144	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.618330956 CEST	58144	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.618336916 CEST	443	58144	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.621897936 CEST	58150	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.621949911 CEST	443	58150	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.622060061 CEST	58150	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.622210979 CEST	58150	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.622227907 CEST	443	58150	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.686072111 CEST	443	58145	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.686793089 CEST	58145	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.686804056 CEST	443	58145	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.687320948 CEST	58145	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.687325954 CEST	443	58145	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.786402941 CEST	443	58145	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.786546946 CEST	443	58145	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.786607027 CEST	58145	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.786848068 CEST	58145	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.786868095 CEST	443	58145	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.786880970 CEST	58145	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.786885977 CEST	443	58145	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.792054892 CEST	58151	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.792094946 CEST	443	58151	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.792402983 CEST	58151	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.792519093 CEST	58151	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.792531013 CEST	443	58151	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.819010973 CEST	443	58146	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.819596052 CEST	58146	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.819619894 CEST	443	58146	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.820089102 CEST	58146	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.820096970 CEST	443	58146	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.940764904 CEST	443	58146	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.941613913 CEST	443	58146	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.941708088 CEST	58146	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.941869974 CEST	58146	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.941869974 CEST	58146	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.941890955 CEST	443	58146	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.941903114 CEST	443	58146	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.945142984 CEST	58152	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.945188999 CEST	443	58152	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:06.945278883 CEST	58152	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.945451021 CEST	58152	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:06.945463896 CEST	443	58152	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.271852970 CEST	443	58149	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.272428989 CEST	58149	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.272474051 CEST	443	58149	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.272974014 CEST	58149	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.272983074 CEST	443	58149	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.274775982 CEST	443	58148	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.275284052 CEST	58148	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.275306940 CEST	443	58148	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.275871992 CEST	58148	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.275882959 CEST	443	58148	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.372550011 CEST	443	58149	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.373066902 CEST	443	58149	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.373192072 CEST	58149	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.373234034 CEST	58149	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.373258114 CEST	443	58149	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.373272896 CEST	58149	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.373280048 CEST	443	58149	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.375216961 CEST	443	58148	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.375247002 CEST	443	58148	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.375293016 CEST	443	58148	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.375308990 CEST	58148	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.375349998 CEST	58148	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.375685930 CEST	58148	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.375704050 CEST	443	58148	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.375715017 CEST	58148	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.375720978 CEST	443	58148	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.456408024 CEST	443	58151	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.457340002 CEST	58151	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.457362890 CEST	443	58151	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.457895041 CEST	58151	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.457901001 CEST	443	58151	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.464895010 CEST	443	58150	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.465296030 CEST	58150	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.465353012 CEST	443	58150	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.465698957 CEST	58150	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.465709925 CEST	443	58150	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.557512999 CEST	443	58151	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.557586908 CEST	443	58151	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.557646990 CEST	58151	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.557868958 CEST	58151	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.557889938 CEST	443	58151	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.557899952 CEST	58151	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.557905912 CEST	443	58151	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.567199945 CEST	443	58150	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.567536116 CEST	443	58150	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.567661047 CEST	58150	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.567713022 CEST	58150	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.567713022 CEST	58150	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.567738056 CEST	443	58150	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.567754030 CEST	443	58150	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.585796118 CEST	443	58152	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.586354017 CEST	58152	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.586375952 CEST	443	58152	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.586827993 CEST	58152	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.586839914 CEST	443	58152	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.686007977 CEST	443	58152	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.686167955 CEST	443	58152	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.686358929 CEST	58152	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.686429024 CEST	58152	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.686460972 CEST	443	58152	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:07.686487913 CEST	58152	443	192.168.2.5	13.107.246.45
Oct 10, 2024 15:33:07.686501980 CEST	443	58152	13.107.246.45	192.168.2.5
Oct 10, 2024 15:33:10.972074032 CEST	58154	443	192.168.2.5	142.250.186.68
Oct 10, 2024 15:33:10.972115040 CEST	443	58154	142.250.186.68	192.168.2.5
Oct 10, 2024 15:33:10.972194910 CEST	58154	443	192.168.2.5	142.250.186.68
Oct 10, 2024 15:33:10.972475052 CEST	58154	443	192.168.2.5	142.250.186.68
Oct 10, 2024 15:33:10.972491980 CEST	443	58154	142.250.186.68	192.168.2.5
Oct 10, 2024 15:33:11.613013983 CEST	443	58154	142.250.186.68	192.168.2.5
Oct 10, 2024 15:33:11.613430023 CEST	58154	443	192.168.2.5	142.250.186.68
Oct 10, 2024 15:33:11.613450050 CEST	443	58154	142.250.186.68	192.168.2.5
Oct 10, 2024 15:33:11.613792896 CEST	443	58154	142.250.186.68	192.168.2.5
Oct 10, 2024 15:33:11.614101887 CEST	58154	443	192.168.2.5	142.250.186.68
Oct 10, 2024 15:33:11.614162922 CEST	443	58154	142.250.186.68	192.168.2.5
Oct 10, 2024 15:33:11.664709091 CEST	58154	443	192.168.2.5	142.250.186.68
Oct 10, 2024 15:33:21.537903070 CEST	443	58154	142.250.186.68	192.168.2.5
Oct 10, 2024 15:33:21.537992001 CEST	443	58154	142.250.186.68	192.168.2.5
Oct 10, 2024 15:33:21.538105011 CEST	58154	443	192.168.2.5	142.250.186.68
Oct 10, 2024 15:33:22.839225054 CEST	58154	443	192.168.2.5	142.250.186.68
Oct 10, 2024 15:33:22.839257002 CEST	443	58154	142.250.186.68	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 15:32:02.754352093 CEST	52802	53	192.168.2.5	1.1.1.1
Oct 10, 2024 15:32:02.773755074 CEST	53	52802	1.1.1.1	192.168.2.5
Oct 10, 2024 15:32:06.233962059 CEST	53	61256	1.1.1.1	192.168.2.5
Oct 10, 2024 15:32:06.235168934 CEST	53	54563	1.1.1.1	192.168.2.5
Oct 10, 2024 15:32:06.536633968 CEST	53	53940	1.1.1.1	192.168.2.5
Oct 10, 2024 15:32:07.636555910 CEST	53	50326	1.1.1.1	192.168.2.5
Oct 10, 2024 15:32:08.201410055 CEST	53	57841	1.1.1.1	192.168.2.5
Oct 10, 2024 15:32:08.714349031 CEST	53	50521	1.1.1.1	192.168.2.5
Oct 10, 2024 15:32:09.863861084 CEST	53	53666	1.1.1.1	192.168.2.5
Oct 10, 2024 15:32:10.906800032 CEST	51707	53	192.168.2.5	1.1.1.1
Oct 10, 2024 15:32:10.907044888 CEST	65532	53	192.168.2.5	1.1.1.1
Oct 10, 2024 15:32:10.913784981 CEST	53	65532	1.1.1.1	192.168.2.5
Oct 10, 2024 15:32:10.914396048 CEST	53	51707	1.1.1.1	192.168.2.5
Oct 10, 2024 15:32:24.703859091 CEST	53	55678	1.1.1.1	192.168.2.5
Oct 10, 2024 15:32:36.061463118 CEST	53	61335	162.159.36.2	192.168.2.5
Oct 10, 2024 15:32:36.587625027 CEST	53019	53	192.168.2.5	1.1.1.1
Oct 10, 2024 15:32:36.595181942 CEST	53	53019	1.1.1.1	192.168.2.5
Oct 10, 2024 15:33:02.469933033 CEST	53	63652	1.1.1.1	192.168.2.5
Oct 10, 2024 15:33:10.962865114 CEST	59474	53	192.168.2.5	1.1.1.1
Oct 10, 2024 15:33:10.969633102 CEST	53	59474	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 10, 2024 15:32:02.754352093 CEST	192.168.2.5	1.1.1.1	0x78a8	Standard query (0)	www.videolan.org	A (IP address)	IN (0x0001)	false
Oct 10, 2024 15:32:10.906800032 CEST	192.168.2.5	1.1.1.1	0x948	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 15:32:10.907044888 CEST	192.168.2.5	1.1.1.1	0xc521	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 10, 2024 15:32:36.587625027 CEST	192.168.2.5	1.1.1.1	0xcd78	Standard query (0)	206.23.85.13.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 10, 2024 15:33:10.962865114 CEST	192.168.2.5	1.1.1.1	0x2f96	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 10, 2024 15:32:02.773755074 CEST	1.1.1.1	192.168.2.5	0x78a8	No error (0)	www.videolan.org		213.36.253.2	A (IP address)	IN (0x0001)	false
Oct 10, 2024 15:32:10.913784981 CEST	1.1.1.1	192.168.2.5	0xc521	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 10, 2024 15:32:10.914396048 CEST	1.1.1.1	192.168.2.5	0x948	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Oct 10, 2024 15:32:36.595181942 CEST	1.1.1.1	192.168.2.5	0xcd78	Name error (3)	206.23.85.13.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 10, 2024 15:33:10.969633102 CEST	1.1.1.1	192.168.2.5	0x2f96	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.videolan.org

fs.microsoft.com

otelrules.azureedge.net

slscr.update.microsoft.com

fe3cr.delivery.mp.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	213.36.253.2	443	2828	C:\Windows\SysWOW64\wget.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:03 UTC	217	OUT	GET /vlc/download-windows.html HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko Accept: / Accept-Encoding: identity Host: www.videolan.org Connection: Keep-Alive
2024-10-10 13:32:03 UTC	394	IN	HTTP/1.1 200 OK Server: nginx/1.25.4 Date: Thu, 10 Oct 2024 13:32:03 GMT Content-Type: text/html Content-Length: 33864 Connection: close Last-Modified: Fri, 23 Aug 2024 17:25:22 GMT Vary: Accept-Encoding ETag: "66c8c602-8448" X-Accepted-Language: en X-Accepted-Fulllang: en Accept-Ranges: bytes X-Clacks-Overhead: GNU Terry Pratchett Strict-Transport-Security: max-age=15768000
2024-10-10 13:32:03 UTC	15990	IN	Data Raw: 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 5f 47 42 22 20 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 Data Ascii: <!DOCTYPE html> <html lang="en_GB" > <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta name="viewport" content="wi
2024-10-10 13:32:03 UTC	16384	IN	Data Raw: 6f 70 65 72 73 2f 75 6e 69 74 79 2e 68 74 6d 6c 22 3e 76 6c 63 2d 75 6e 69 74 79 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 72 6f 6c 65 3d 22 73 65 70 61 72 61 74 6f 72 22 20 63 6c 61 73 73 3d 22 64 69 76 69 64 65 72 22 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 70 72 6f 6a 65 63 74 73 2f 22 3e 41 6c 6c 20 50 72 6f 6a 65 63 74 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e Data Ascii: opers/unity.html">vlc-unity</a></li> <li role="separator" class="divider"></li> <li><a href="//www.videolan.org/projects/">All Projects</a></li> </ul> </li> <li class="dropdown "> <a href="//www.
2024-10-10 13:32:03 UTC	1490	IN	Data Raw: 64 69 76 20 69 64 3d 27 74 72 61 6e 73 6c 61 74 69 6f 6e 27 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 22 20 73 74 79 6c 65 3d 27 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 34 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 20 63 6f Data Ascii: div id='translation' class="col-md-12" style="font-size: 9px;"> </div> </div> <div class="row"> <div class="col-md-12" style='text-align: center; line-height: 14px; font-size: 9px; co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49722	95.100.63.156	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:11 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 13:32:12 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=184380 Date: Thu, 10 Oct 2024 13:32:12 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49723	95.100.63.156	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:13 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 13:32:13 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=184431 Date: Thu, 10 Oct 2024 13:32:13 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-10 13:32:13 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.5	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:21 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:22 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:21 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 09 Oct 2024 03:56:29 GMT ETag: "0x8DCE8165B436280" x-ms-request-id: 933bb64d-501e-00a3-36e1-1ac0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133221Z-17db6f7c8cfvzwz27u5rnq9kpc00000000s000000000k3bv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:22 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-10 13:32:22 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-10 13:32:22 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-10 13:32:22 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-10 13:32:22 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-10 13:32:22 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-10 13:32:22 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-10 13:32:22 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-10 13:32:22 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-10 13:32:22 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49724	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:21 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=laD8R5yl11nkwe4&MD=3dSVP44a HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-10 13:32:22 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: d8deca1d-0d12-462b-9b5b-a6ff10d78f7c MS-RequestId: d885bddf-da29-4b0c-ac1d-40b507aa3426 MS-CV: kRzT0HDmLUic2Qxi.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 10 Oct 2024 13:32:21 GMT Connection: close Content-Length: 24490
2024-10-10 13:32:22 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-10 13:32:22 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:23 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:23 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 38350f62-a01e-0021-1402-1a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133223Z-185b7d577bdvng2dzp910e3fdc00000002h000000000x36a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:23 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:23 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:23 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 88c7ce87-b01e-0070-57eb-1a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133223Z-17db6f7c8cfkzc2r8tan3gsa7n00000000eg0000000068uy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:23 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:23 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:23 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: c0e2c5aa-701e-0098-1461-1a395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133223Z-185b7d577bdx4h6cdqr6y962uw00000001r000000000wry5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:23 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:23 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:23 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 971a1148-a01e-000d-48cd-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133223Z-17db6f7c8cfg4bg8ayn51tpsz800000000f0000000001vv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:23 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:23 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:23 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:23 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c8ae7944-b01e-0002-48f9-191b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133223Z-185b7d577bd6kqv2c47qpxmgb000000002kg00000000w9q2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:23 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:23 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:23 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 66411a6b-c01e-00a1-1eca-1a7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133223Z-17db6f7c8cfrbg6x0qcg5vwtus00000000sg00000000qd4e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:24 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:23 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:23 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1633ae45-701e-006f-7504-1aafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133223Z-185b7d577bdwmw4ckbc4ywwmwg000000022g00000000he3d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:24 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:23 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:23 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133223Z-17db6f7c8cfg4bg8ayn51tpsz800000000p00000000013b6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:24 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:23 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:24 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: daab1690-601e-0070-11cb-19a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133224Z-185b7d577bdqh8w7ruf4kwucmw000000027000000000v2a3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:24 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:23 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:24 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 14c2f8e7-301e-0000-27cc-19eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133224Z-185b7d577bdqh8w7ruf4kwucmw00000002d0000000005p7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:24 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:24 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 54dd9531-c01e-0079-2afa-19e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133224Z-185b7d577bdhgg84qrpnm2d6w000000002bg00000000tdq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:24 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:24 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: c373b686-b01e-001e-567b-1a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133224Z-185b7d577bdvdf6b7wzrpm3w2w000000025000000000rck4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:24 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:24 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:24 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 35b61c96-e01e-0052-1103-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133224Z-185b7d577bdx4h6cdqr6y962uw00000001ug00000000hmsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:24 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:24 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:24 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: d01f8df5-c01e-007a-10fd-19b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133224Z-185b7d577bdhgg84qrpnm2d6w000000002d000000000p7r0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:24 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:24 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:24 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 0f93c021-e01e-0020-05fb-19de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133224Z-185b7d577bdqh8w7ruf4kwucmw000000027000000000v2dc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:24 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:25 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:25 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133225Z-17db6f7c8cf4g2pjavqhm24vp400000000q000000000fexr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:25 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:25 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:25 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 06ea2a23-001e-005a-4efb-19c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133225Z-185b7d577bd6kqv2c47qpxmgb000000002sg000000001pps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:25 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:25 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b85ce019-d01e-0028-4fe2-1a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133225Z-17db6f7c8cfvzwz27u5rnq9kpc00000000rg00000000mn9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:25 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:25 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 77080ea6-601e-003e-13e1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133225Z-17db6f7c8cfqxt4wrzg7st2fm800000000eg00000000906n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:25 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:26 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:26 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: aa894e1a-201e-0000-7cf8-19a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133226Z-185b7d577bdfx2dd0gsb231cq000000002h0000000003gtc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:26 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:26 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:26 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: dac0d9b0-601e-0097-08fb-19f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133226Z-185b7d577bdvng2dzp910e3fdc00000002hg00000000vx76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:26 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:26 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 837be9b2-101e-0046-5ec9-1991b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133226Z-185b7d577bdhgg84qrpnm2d6w000000002ag00000000uwd5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:26 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 006c2e63-c01e-000b-0675-1ae255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133226Z-185b7d577bdhgg84qrpnm2d6w000000002fg00000000ar2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:27 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:27 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6ca0adc2-b01e-0021-19e3-1acab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133227Z-17db6f7c8cfvzwz27u5rnq9kpc00000000u000000000adyw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:27 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:27 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:27 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 9e066682-101e-008d-6332-1a92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133227Z-185b7d577bdwmw4ckbc4ywwmwg000000022g00000000heab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:27 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:27 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f7492d67-a01e-000d-0ae4-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133227Z-17db6f7c8cfqxt4wrzg7st2fm800000000fg000000009cn2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:27 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:27 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 935479ee-801e-008f-6f7b-1a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133227Z-185b7d577bdchm66cr3227wnbw00000001yg00000000wsgu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:27 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:27 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: deafa783-901e-007b-5dcf-19ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133227Z-185b7d577bdwmw4ckbc4ywwmwg00000001z000000000vr3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:27 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:27 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 9bc89f40-601e-0002-25fa-19a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133227Z-185b7d577bdfx2dd0gsb231cq000000002a000000000xbrd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:27 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:28 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:28 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 856b37ee-301e-001f-69fa-19aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133228Z-185b7d577bdqh8w7ruf4kwucmw00000002bg00000000cetg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:28 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:28 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 2e443ec0-d01e-0066-4b04-1aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133228Z-185b7d577bdqh8w7ruf4kwucmw000000026g00000000w55d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:28 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133228Z-185b7d577bdcmhtqq5qad662uw00000002q000000000e90n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:28 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:28 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a9a22b8f-501e-007b-21d3-195ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133228Z-185b7d577bdwmw4ckbc4ywwmwg000000025g000000003161 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:28 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:28 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:28 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f0ecbf-701e-005c-16e0-1abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133228Z-17db6f7c8cfkzc2r8tan3gsa7n00000000gg0000000065md x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:28 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:28 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:29 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: df49ad61-f01e-0085-3604-1a88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133228Z-185b7d577bd6kqv2c47qpxmgb000000002r000000000ag3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:29 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:28 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:28 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: dd82c002-401e-0016-14c9-1953e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133228Z-185b7d577bdd97twt8zr6y8zrg00000002rg000000005ru5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:29 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:28 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:29 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 65388d65-201e-0051-79ef-1a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133229Z-17db6f7c8cf4g2pjavqhm24vp400000000m000000000qwq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:29 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:29 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:29 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: aa8fb35a-601e-003d-30cd-1a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133229Z-17db6f7c8cfkzc2r8tan3gsa7n00000000gg0000000065nw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:29 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:29 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:29 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133229Z-17db6f7c8cf7s6chrx36act2pg00000000r000000000fyq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:29 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:29 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:29 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 4e00ab95-601e-000d-7029-1a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133229Z-185b7d577bdt2k4f7f9nr1pp7s000000023g00000000tprd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:29 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:29 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:29 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: df5113df-601e-0050-0cfd-192c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133229Z-185b7d577bdd97twt8zr6y8zrg00000002r0000000007whb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:29 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:29 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:29 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 5aec4ebb-b01e-0002-57ca-1a1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133229Z-17db6f7c8cfvzwz27u5rnq9kpc00000000pg00000000s6d4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:29 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:30 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:30 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:30 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 53a4bd0f-c01e-00ad-6beb-1aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133230Z-17db6f7c8cfqxt4wrzg7st2fm800000000h000000000903w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 13:32:30 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:30 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:30 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: acd8be42-501e-000a-16f9-190180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133230Z-185b7d577bdhgg84qrpnm2d6w000000002hg000000000t5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:30 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:30 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 322ce975-a01e-001e-7304-1a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133230Z-185b7d577bdcmhtqq5qad662uw00000002r0000000008ued x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:30 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:30 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 73914296-901e-0083-44fd-19bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133230Z-185b7d577bdd97twt8zr6y8zrg00000002s0000000002s1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:30 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:31 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:31 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 0623c5de-c01e-00ad-7f6d-1aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133231Z-185b7d577bdvdf6b7wzrpm3w2w000000022g00000000xs2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:31 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:31 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:31 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 64ee2c34-901e-0048-70e2-1ab800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133231Z-17db6f7c8cfkzc2r8tan3gsa7n00000000kg000000006rkc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:31 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:31 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 54db7b24-c01e-0079-66f9-19e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133231Z-185b7d577bdt2k4f7f9nr1pp7s000000024000000000rgd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:31 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b9724e67-901e-00ac-7bd7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133231Z-17db6f7c8cf4g2pjavqhm24vp400000000r000000000b05b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:31 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:31 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:31 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: d19f014e-401e-0035-1170-1a82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133231Z-185b7d577bdd4z6mz0c833nvec00000002kg00000000e1dc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:32 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:32 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133232Z-17db6f7c8cfkzc2r8tan3gsa7n00000000e00000000064em x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:32 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 150221b2-d01e-007a-13e9-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133232Z-17db6f7c8cfvzwz27u5rnq9kpc00000000pg00000000s6kp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:32 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 2f48674a-001e-00a2-5d77-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133232Z-185b7d577bdx4h6cdqr6y962uw00000001tg00000000p5mh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:32 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:32 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 06589d36-d01e-0065-18bf-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133232Z-17db6f7c8cf5mtxmr1c51513n000000000r000000000875n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:32 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:32 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:32 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a45e7bac-201e-003c-72f3-1a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133232Z-17db6f7c8cfvzwz27u5rnq9kpc00000000pg00000000s6nn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:32 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:32 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:32 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: b3584e95-501e-0029-5500-1bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133232Z-17db6f7c8cfvzwz27u5rnq9kpc00000000ng00000000u6wa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:32 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:32 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 640ec2fa-901e-0083-59e1-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133232Z-17db6f7c8cf4g2pjavqhm24vp400000000m000000000qx79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:33 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49789	13.107.246.45	443	7092	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:32 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:32 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 4ac88496-801e-0015-0cfb-19f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133232Z-185b7d577bdfx2dd0gsb231cq000000002eg00000000f5qq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:33 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:33 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:33 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: ec1d2ac3-501e-0035-7297-1ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133233Z-185b7d577bdhgg84qrpnm2d6w000000002gg00000000648b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:33 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:33 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:33 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: da6610aa-e01e-0099-7dc3-19da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133233Z-185b7d577bdxdkz6n7f63e388000000002a000000000n5xe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:33 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:33 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:33 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 040bbead-801e-008c-1fc9-197130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133233Z-185b7d577bdvng2dzp910e3fdc00000002hg00000000vxyq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:33 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:33 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:33 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 0e570907-201e-003f-4105-1a6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133233Z-185b7d577bdx4h6cdqr6y962uw00000001tg00000000p5qy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:33 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:33 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:33 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 5c01f27a-b01e-0070-0a32-1a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133233Z-185b7d577bdt2k4f7f9nr1pp7s000000024000000000rgm0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:33 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:34 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:34 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:34 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 77cf7d0e-001e-000b-05d9-1a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133234Z-17db6f7c8cfg4bg8ayn51tpsz800000000gg0000000026uf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:34 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:34 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: beeeb270-f01e-003f-4fe2-1ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133234Z-17db6f7c8cfvzwz27u5rnq9kpc00000000s000000000k49s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:34 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:34 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 2c65b6c1-101e-0079-26fb-195913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133234Z-185b7d577bdd97twt8zr6y8zrg00000002pg00000000frzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:34 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:34 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:34 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133234Z-17db6f7c8cfrbg6x0qcg5vwtus00000000u000000000katc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:34 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:34 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ae768298-401e-005b-2b04-1a9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133234Z-185b7d577bdwmw4ckbc4ywwmwg00000001yg00000000wqv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:35 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:35 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 38c628c3-f01e-00aa-23c2-198521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133235Z-185b7d577bdqh8w7ruf4kwucmw000000027000000000v35u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:35 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:35 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 7d3f2e15-101e-00a2-5aca-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133235Z-17db6f7c8cf4g2pjavqhm24vp400000000sg00000000392r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:35 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:35 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 52f821db-f01e-005d-3b5c-1a13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133235Z-185b7d577bdx4h6cdqr6y962uw00000001ug00000000hnps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:35 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:35 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:35 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 124c4085-f01e-0096-13fa-1910ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133235Z-185b7d577bd6kqv2c47qpxmgb000000002n000000000trqe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:35 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:35 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:35 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 8f0b4528-901e-0067-42c6-19b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133235Z-185b7d577bdqh8w7ruf4kwucmw00000002cg0000000082su x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:35 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:35 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:35 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 9ad66ff1-501e-00a0-38ec-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133235Z-17db6f7c8cfkzc2r8tan3gsa7n00000000f0000000006h4r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:35 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:35 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:35 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 82cb7222-a01e-0098-8034-1a8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133235Z-185b7d577bdvdf6b7wzrpm3w2w000000023000000000w96v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:36 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:36 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:36 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3056715e-c01e-007a-0131-1ab877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133236Z-185b7d577bdfx2dd0gsb231cq000000002e000000000hxa4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:36 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:36 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:36 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:36 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8957210b-901e-005b-0df7-1a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133236Z-17db6f7c8cfkzc2r8tan3gsa7n00000000h0000000006prk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 13:32:36 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:36 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:36 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 99b3acd6-c01e-0046-32fd-192db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133236Z-185b7d577bdd97twt8zr6y8zrg00000002s0000000002sep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:36 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:36 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:36 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: d6ef3fde-501e-0047-54cb-19ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133236Z-185b7d577bd6kqv2c47qpxmgb000000002r000000000agpk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:36 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:36 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:36 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:36 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: ddfb06e3-401e-0016-1bf9-1953e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133236Z-185b7d577bdvng2dzp910e3fdc00000002k000000000w1kb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:36 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	60711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:36 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:36 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 05161790-801e-002a-4e75-1a31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133236Z-185b7d577bdx4h6cdqr6y962uw00000001u000000000mkfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:37 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	60713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:37 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:37 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 49d16118-701e-006f-1f80-1aafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133237Z-185b7d577bdhgg84qrpnm2d6w000000002hg000000000tyr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:37 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	60712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:37 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:37 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 61b77f63-201e-003f-4681-1a6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133237Z-185b7d577bdt2k4f7f9nr1pp7s000000023000000000ux3e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:37 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	60714	13.85.23.206	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:37 UTC	142	OUT	GET /clientwebservice/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: fe3cr.delivery.mp.microsoft.com
2024-10-10 13:32:37 UTC	234	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Content-Type-Options: nosniff Date: Thu, 10 Oct 2024 13:32:36 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	60715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:37 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:37 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 142f9b94-401e-0035-4acf-1982d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133237Z-185b7d577bdd4z6mz0c833nvec00000002f000000000u7av x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:37 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	60716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:37 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:37 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: eccfae73-f01e-0003-4131-1a4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133237Z-185b7d577bdcmhtqq5qad662uw00000002n000000000ryz4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:37 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	60717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:37 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:37 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: d36f189d-001e-0014-53fa-195151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133237Z-185b7d577bdfx2dd0gsb231cq000000002e000000000hxh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:37 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	60719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:37 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:37 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 2e445955-d01e-0066-2604-1aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133237Z-185b7d577bdx4h6cdqr6y962uw00000001x0000000006ndr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:37 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	60718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:37 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:37 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:37 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133237Z-17db6f7c8cfkzc2r8tan3gsa7n00000000dg000000006c76 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:37 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	60721	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:38 UTC	124	OUT	GET /sls/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: slscr.update.microsoft.com
2024-10-10 13:32:38 UTC	318	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 MS-CV: MHHURzfKeke5EUDk.0 MS-RequestId: 3e632497-f3f6-41d9-b02c-ef7f19456acb MS-CorrelationId: ab2fc5be-8ee5-4930-ac13-0a6081fbf518 X-Content-Type-Options: nosniff Date: Thu, 10 Oct 2024 13:32:37 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	60720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:38 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:38 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: bd95943e-401e-005b-4931-1a9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133238Z-185b7d577bdx4h6cdqr6y962uw00000001rg00000000v70n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:38 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	60722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:38 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:38 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 36ec684a-f01e-0052-24da-1a9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133238Z-17db6f7c8cf4g2pjavqhm24vp400000000qg00000000dfv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:38 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	60723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:38 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:38 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 0623e04f-c01e-00ad-796d-1aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133238Z-185b7d577bdwmw4ckbc4ywwmwg000000023g00000000de3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:38 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	60725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:38 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:38 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: db35775e-401e-0047-2d68-1a8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133238Z-185b7d577bdchm66cr3227wnbw000000023000000000fm3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:38 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	60724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:38 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:38 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:38 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: efbad5a3-301e-0000-2ec0-1aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133238Z-17db6f7c8cfqxt4wrzg7st2fm800000000n0000000009ext x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:38 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	60726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:38 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:38 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 60f9f18d-f01e-003f-6af9-19d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133238Z-185b7d577bdfx2dd0gsb231cq000000002b000000000uyt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:39 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	60727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:39 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:39 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: e8fbd797-601e-005c-7ee6-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133239Z-17db6f7c8cfvzwz27u5rnq9kpc00000000sg00000000g62k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:39 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	60728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:39 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:39 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: ed34bfa3-901e-0015-1f08-1ab284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133239Z-185b7d577bdcmhtqq5qad662uw00000002rg000000006kuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:39 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	60729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:39 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:39 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: de1d1d81-401e-0064-31fa-1954af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133239Z-185b7d577bdhgg84qrpnm2d6w000000002g0000000008b97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:39 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	60730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:39 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:39 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 5a32f30a-b01e-0002-0880-1a1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133239Z-185b7d577bdt2k4f7f9nr1pp7s000000025000000000pe96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:39 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	60731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:39 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:39 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:39 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 8d697180-901e-005b-33fa-192005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133239Z-185b7d577bd8m52vbwet1cqbbw00000002h000000000w5d5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:39 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	60732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:39 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:39 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 979c4aea-701e-0021-146b-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133239Z-185b7d577bdwmw4ckbc4ywwmwg000000023g00000000de8u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:40 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	60733	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:40 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=laD8R5yl11nkwe4&MD=3dSVP44a HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-10 13:32:40 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: ccba966e-870f-4731-a6a2-7ed8665ecf55 MS-RequestId: 36bc6a7f-4ae0-4d93-a55e-8fa0c40ef1bd MS-CV: qazEalO83kOQIsci.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 10 Oct 2024 13:32:39 GMT Connection: close Content-Length: 24490
2024-10-10 13:32:40 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-10 13:32:40 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	60734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:40 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:40 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 5892b05f-f01e-0085-23d9-1a88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133240Z-17db6f7c8cf5mtxmr1c51513n000000000mg00000000nzpn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:40 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	60735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:40 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:40 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: bff0cce5-c01e-002b-1ef8-196e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133240Z-185b7d577bdd4z6mz0c833nvec00000002hg00000000m20x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:40 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	60736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:40 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:40 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: d113afee-501e-008f-14e4-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133240Z-17db6f7c8cfvzwz27u5rnq9kpc00000000pg00000000s77y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:40 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	60737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:40 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:40 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2d3659d2-d01e-0066-1cca-1aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133240Z-17db6f7c8cf4g2pjavqhm24vp400000000n000000000qvcm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:40 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	60738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:40 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:40 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:40 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 05046913-601e-000d-6fd8-1a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133240Z-17db6f7c8cf7s6chrx36act2pg00000000tg0000000031ft x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:40 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	60740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:41 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:41 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: aa90298d-201e-0000-6dfb-19a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133241Z-185b7d577bdhgg84qrpnm2d6w000000002d000000000p929 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:41 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	60739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:41 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:41 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: d40d243f-201e-005d-0dfb-19afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133241Z-185b7d577bdvng2dzp910e3fdc00000002q000000000dksw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:41 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	60741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:41 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 7318af80-d01e-002b-2bb0-1925fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133241Z-185b7d577bdwmw4ckbc4ywwmwg000000025g0000000032by x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	60742	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:41 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=laD8R5yl11nkwe4&MD=3dSVP44a HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-10 13:32:41 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 993cd6d2-a44e-4e14-b98d-c76fc65d9ed2 MS-RequestId: 481820a7-88ac-4c0d-b4fe-5974a3462f3c MS-CV: lJlX7pNrckSPosk9.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 10 Oct 2024 13:32:41 GMT Connection: close Content-Length: 30005
2024-10-10 13:32:41 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-10 13:32:41 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	60743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:41 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:41 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: a23272df-501e-0035-4e04-1ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133241Z-185b7d577bdqh8w7ruf4kwucmw00000002b000000000emtc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:41 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	60744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:41 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:41 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 0e537b27-201e-003f-3804-1a6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133241Z-185b7d577bdcmhtqq5qad662uw00000002k000000000xfs0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:41 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	60745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:41 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:41 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 72cf124c-701e-0098-6374-1a395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133241Z-185b7d577bdd97twt8zr6y8zrg00000002p000000000hn83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:41 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	60746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:41 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:41 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: ec3ff346-f01e-0003-5304-1a4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133241Z-185b7d577bdhgg84qrpnm2d6w000000002dg00000000nnw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:41 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	60747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:41 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:41 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 842b74fa-501e-008c-2f04-1acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133241Z-17db6f7c8cfvzwz27u5rnq9kpc00000000pg00000000s7cx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	60748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:42 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:42 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 1df6ec6a-501e-00a3-34fb-19c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133242Z-185b7d577bdcmhtqq5qad662uw00000002ng00000000q8mr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:42 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	60750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:42 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:42 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: da388a2e-601e-0097-49c9-19f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133242Z-185b7d577bdd97twt8zr6y8zrg00000002h000000000x04g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:42 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	60751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:42 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:42 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 856b5733-301e-001f-10fa-19aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133242Z-185b7d577bd6kqv2c47qpxmgb000000002q000000000f0br x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:42 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	60752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:42 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:42 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: bbcce40b-d01e-002b-7f04-1a25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133242Z-185b7d577bdchm66cr3227wnbw0000000250000000006bph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:42 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	60753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:43 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:43 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: acda0315-501e-000a-3cfa-190180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133243Z-185b7d577bdt2k4f7f9nr1pp7s000000027g00000000dga0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:43 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	60754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:43 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:43 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e2476cc5-001e-00ad-1ecd-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133243Z-17db6f7c8cf4g2pjavqhm24vp400000000t0000000000gv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:43 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	60755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:43 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:43 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: db2ef080-601e-0070-31f9-19a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133243Z-185b7d577bd6kqv2c47qpxmgb000000002mg00000000t2gz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:43 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	60756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:43 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:43 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 52d1be64-501e-0029-098e-1ad0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133243Z-185b7d577bdd4z6mz0c833nvec00000002kg00000000e2g1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:43 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	60749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:43 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 0506fa48-b01e-001e-4cc1-1a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133243Z-17db6f7c8cf5mtxmr1c51513n000000000k000000000q05k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	60757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:44 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:44 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 35b91e5e-e01e-0052-1204-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133244Z-185b7d577bdd97twt8zr6y8zrg00000002kg00000000tksw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:44 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	60758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:44 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:44 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: c01deb01-701e-001e-0a34-1af5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133244Z-185b7d577bdt2k4f7f9nr1pp7s000000028g000000008c99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:44 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	60760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:44 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:44 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 17a4aa42-901e-007b-5170-1aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133244Z-185b7d577bdvdf6b7wzrpm3w2w000000025000000000re6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:44 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	60759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:44 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:44 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:44 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: b9726785-901e-00ac-76d7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133244Z-17db6f7c8cfqxt4wrzg7st2fm800000000m000000000aaeq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:44 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	60761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:44 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:44 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: a5214445-001e-0079-2475-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133244Z-185b7d577bdd4z6mz0c833nvec00000002kg00000000e2nv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:44 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	60762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:45 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:45 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 992d699c-901e-005b-528c-1a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133245Z-185b7d577bdd4z6mz0c833nvec00000002f000000000u811 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:45 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	60764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:45 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:45 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:45 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 934b2f53-501e-00a3-32e6-1ac0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133245Z-17db6f7c8cfkzc2r8tan3gsa7n00000000fg0000000067nv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:45 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	60765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:45 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:45 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 17ba822c-f01e-001f-0875-1a5dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133245Z-185b7d577bdx4h6cdqr6y962uw00000001x0000000006p0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:45 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	60763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:45 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:45 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 63590950-201e-0085-2bd8-1a34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133245Z-17db6f7c8cf7s6chrx36act2pg00000000qg00000000k9ez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:45 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	60766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:45 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:45 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 1726acf1-801e-0083-09f0-1af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133245Z-17db6f7c8cf5mtxmr1c51513n000000000h000000000nzhy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:45 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	60768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:45 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:45 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: dab0eed4-601e-0070-18cd-19a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133245Z-185b7d577bdt2k4f7f9nr1pp7s000000023000000000uxww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:46 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	60769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:45 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:45 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 97a78b6f-701e-0021-7f6e-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133245Z-185b7d577bdhgg84qrpnm2d6w000000002fg00000000asrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:46 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	60770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:45 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:45 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: 738ca5f8-901e-0083-1dfb-19bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133245Z-185b7d577bdxdkz6n7f63e3880000000026000000000yz3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	60771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:45 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:45 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: a3831b46-101e-008e-09e3-1acf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133245Z-17db6f7c8cfrbg6x0qcg5vwtus00000000t000000000n21d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:46 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	60767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:46 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:46 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:46 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: e4896758-501e-007b-0aba-1a5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133246Z-17db6f7c8cfg4bg8ayn51tpsz800000000p000000000163h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:46 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	60772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:46 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:46 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: a4ffa968-f01e-0020-04c5-19956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133246Z-185b7d577bdxdkz6n7f63e3880000000027g00000000vk3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:46 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	60773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:46 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:46 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: b7844524-101e-0017-17eb-1a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133246Z-17db6f7c8cfkzc2r8tan3gsa7n00000000p0000000004ukb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 13:32:46 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	60775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 13:32:46 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 13:32:47 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 13:32:46 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: 054ff9cd-601e-000d-3cf3-1a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T133246Z-17db6f7c8cfg4bg8ayn51tpsz800000000ng0000000022eg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 13:32:47 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Target ID:	0
Start time:	09:32:01
Start date:	10/10/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\system32\cmd.exe /c wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://www.videolan.org/vlc/download-windows.html" > cmdline.out 2>&1
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	09:32:01
Start date:	10/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	09:32:01
Start date:	10/10/2024
Path:	C:\Windows\SysWOW64\wget.exe
Wow64 process (32bit):	true
Commandline:	wget -t 2 -v -T 60 -P "C:\Users\user\Desktop\download" --no-check-certificate --content-disposition --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko" "https://www.videolan.org/vlc/download-windows.html"
Imagebase:	0x400000
File size:	3'895'184 bytes
MD5 hash:	3DADB6E2ECE9C4B3E1E322E617658B60
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	09:32:03
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\download\download-windows.html
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	09:32:04
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1760,i,8591697756766500833,3544110521577231241,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.videolan.org/vlc/download-windows.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Desktop\cmdline.out

C:\Users\user\Desktop\download\download-windows.html

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_2080013251\sets.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\Google.Widevine.CDM.dll

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3380_30737552\manifest.json

Chrome Cache Entry: 143

Chrome Cache Entry: 146

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Windows Analysis Report
https://www.videolan.org/vlc/download-windows.html